Re: SASL profile for FTP?

[Alexey Melnikov <mel@xxxxxxx>]

Marc Horowitz wrote:

> Chris Newman <Chris.Newman@xxxxxxxxxxxx> writes:
>
> >> When the FTP security stuff was being debated, John Myers proposed a 5
> >> page SASL-based alternative to the 27 page RFC 2228.  Incidentally, the
> >> CAT WG (a security area WG) ignored John's proposal.  I suppose one could
> >> draw some conclusions from this and the subsequent deployment patterns of
> >> RFC 2228.
>
> There's eight implementations of rfc 2228.
>
> SASL is simpler, I admit.  But there were implementations of ftpsec
> shipping before SASL was generalized.  Shooting the existing
> implementors is poor practice.
>
> Do a SASL profile, and let the market decide.

May be I am wrong, but after my reading of document, SASL profile can be derived
from RFC 2228.

Regards,
Alexey Melnikov
------------------------------------------
SMTP/POP3/IMAP4/ACAP servers creation team
"ACAP Explorer" client
Imap Development Kit (my own product)

Epsylon Technologies, Russia
 http://www.demo.ru
------------------------------------------