HTTPsec Authentication Protocol

6.5. Continuation Response Transcript

The continuation response transcript is an input to mac directive creation and validation. It is itself computed as follows:

response-transcript = 
    "httpsec/1.0"     || ":"
  || token            || ":"   ; from request
  || count            || ":"
  || url              || ":"   ; from request
  || digest           || ":"
  || Method           || ":"   ; from request
  || Status-Code      || ":"
  || Content-Location || ":"
  || Content-MD5      || ":"
  || ETag             || ":"
  || Last-Modified    || ":"
  || Expires          || ":"
  || Content-Encoding || ":"
  || Content-Range    || ":"
  || Content-Type

where the following apply:

1. Values are taken from the response, unless indicated by the "from request" annotation.
2. token, count, url, and digest refer to the protocol directives with those names. They are the directives' literal US-ASCII encoded values exactly as they appear in those headers.
3. Method is the Method [HTTP][ 5.1.1] from the request's Request-Line [HTTP][ 5.1].
4. Status-Code is the three digit Status Code [HTTP][ 6.1.1] from the response's Status-Line [HTTP][ 6.1].
5. Content-Location, Content-MD5, ETag, Last-Modified, Expires, Content-Encoding, Content-Range, and Content-Type refer to [HTTP][ 4.2] headers. Their values MUST first undergo canonicalization as detailed in the Header Canonicalization section.