Sam Hartman wrote:
One question to consider is whether a gss implementation is more likely to have the dot-separated OID or the BER form.
Does GSS-API specify how OIDs are stored?
I would rather say that the dot-separated form must be canonical, rather than forcing people to implement BER encoding in there SASL implementations ;-).Also, note that BER is canonical. Consider the difference between 1.002 and 1.2