[feature request] Cookie support

Joe Orton joe at manyfish.co.uk
Tue Sep 15 18:44:14 EDT 2009


On Tue, Sep 15, 2009 at 11:49:39AM -0400, Keith Beckman wrote:
> I noticed that cadaver very purposely doesn't include cookie support
> (http://www.webdav.org/cadaver/history.html, release 0.14.1). However,
> several commercial servers, including Novell's oneNet NetStorage,
> require session cookies for use (NetStorage maintains a persistent 401
> if proper Basic credentials are offered without the session cookie).

The server is broken.  Lobby the server vendor, or pick a better server.  
cadaver is one of many DAV clients which doesn't support cookies, and 
that isn't going to change.  There was clear consensus in the IETF 
working group that DAV clients are not required to support cookies.

> While philosophical issues about the WebDAV RFC abound -- and this may
> indeed be considered a server bug -- cookies are part of HTTP and WebDAV
> is considered an extension to HTTP

The premise of this argument is false - cookies are not part of the HTTP 
specification (RFC 2616).  There's also no cookies implementation in 
neon - the old code was removed as it was not correct, secure, or 
interoperable.

Regards, Joe



More information about the cadaver mailing list