水無月ばけらのえび日記

bakera.jp > 水無月ばけらのえび日記 > 2001年のえび日記 > 2001年12月 > 2001年12月28日(金曜日)

2001年12月28日(金曜日)

RFC2396 における Userinfo

RFC2396 だと NOT RECOMMENDED と書いてはあるけれども一応書けるみたい。でも NOT RECOMMENDED ですし、HTTP URL に書けるのかどうかというのはまた別の話。

3.2.2. Server-based Naming Authority

URL schemes that involve the direct use of an IP-based protocol to a specified server on the Internet use a common syntax for the server component of the URI's scheme-specific data:

<userinfo>@<host>:<port>

where <userinfo> may consist of a user name and, optionally, scheme specific information about how to gain authorization to access the server. The parts "<userinfo>@" and ":<port>" may be omitted.

server = [ [ userinfo "@" ] hostport ]

The user information, if present, is followed by a commercial at-sign "@".

userinfo = *( unreserved | escaped |

";" | ":" | "&" | "=" | "+" | "$" | "," )

Some URL schemes use the format "user:password" in the userinfo field. This practice is NOT RECOMMENDED, because the passing of authentication information in clear text (such as URI) has proven to be a security risk in almost every case where it has been used.

以上、urn:ietf:rfc:2396 より

関連する話題: Web / RFC / IANA

最近の日記

関わった本など