[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Holding gs2

Chris Newman <Chris.Newman@xxxxxxx> writes:

> As a SASL implementer, it is my current intention to not implement the
> "security layer" feature of SASL.

For the record, I agree and think that the "security layer" of SASL has
been a failure and the time has come to officially deprecate them.

We could update RFC 4422 to say that security layers are deprecated in
favor of channel-binding to another security layer such as TLS or IPSEC.

/Simon