Hey

Raymond Chandler on the IRC channel (#curl) pointed out this URL:

         http://httpd.apache.org/docs/2.0/mod/mod_auth_digest.html#msie

It quite clearly describes a bug in Microsoft Internet Explorer version 5 and
6 with Digest Authentication when the GET string contains a query part.

Why does this concern us? Because there are indications that IIS have the same
bug and thus expects HTTP clients to do this violation of the RFC. If this is
true, libcurl might need some new interesting flag to make Digest work with
such flawed servers.

-- 
  / daniel.haxx.se