Probably obvious, but my main concern was interactivity while connected to
the server, not interactivity in general.
My main thought was that SASL mechanisms should be designed to support
unattended operation when possible.
Another related and interesting side-effect of mechanisms like DIGEST is
that they don't reveal the credentials to the server. This allows clients
to rummage through their authentication wallet for credentials for a given
realm and safely try it with the server without even prompting the user (if
appropriate). I think this makes mechanisms like DIGEST useful even inside
a TLS secured connection to a server where you're not worried about eaves
droppers but are worried about revealing credentials to an imposter server.
LL
At 05:28 AM 9/9/99 +0000, RL 'Bob' Morgan wrote:
So if you're saying that well-designed clients need to support
interactivity when needed and unattended operation when needed, I agree.
If you're suggesting that mechanisms need to change to make this possible,
I don't.