Re: control combination was: Re: protocol-22 comments)

[Hallvard B Furuseth <h.b.furuseth@usit.uio.no>]

Kurt D. Zeilenga writes:
> How about?
>   Controls are not to be combined (with other controls
>   of same or different types) unless the semantics of the
>   combination have been defined.  When an implementation
>   (client or server) encounters a combination of controls
>   whose semantics are not defined (or not known to that
>   implementation), the implementation MUST treat the
>   request as a protocol error.
> 
> (Note: I generalized this for both clients and servers,
> and for requests which don't have responses.)

If we keep the MUST, I disagree with a MUST for the client.
Clients should be free to trust the server to produce correct
data, except when security dictates otherwise.

-- 
Hallvard