Re: SASL profile for FTP?

[Marc Horowitz <marc@xxxxxxxxxx>]

Chris Newman <Chris.Newman@xxxxxxxxxxxx> writes:

>> When the FTP security stuff was being debated, John Myers proposed a 5
>> page SASL-based alternative to the 27 page RFC 2228.  Incidentally, the
>> CAT WG (a security area WG) ignored John's proposal.  I suppose one could
>> draw some conclusions from this and the subsequent deployment patterns of
>> RFC 2228.

There's eight implementations of rfc 2228.

SASL is simpler, I admit.  But there were implementations of ftpsec
shipping before SASL was generalized.  Shooting the existing
implementors is poor practice.

Do a SASL profile, and let the market decide.

		Marc