Re: Clarifying the qualities we desire the DIGEST-MD5 replacement to have

[Abhijit Menon-Sen <ams@xxxxxxxxxx>]

At 2008-03-12 09:33:43 -0500, Chris.Newman@xxxxxxx wrote:
>
> > Regarding the SCRAM draft, I hope there'll be a version soon which
> > spells out what each challenge and response consists of, and what
> > the server must remember (or be able to construct).  It's cumbersome
> > to dig around in the parameter descriptions in order to figure that
> > out.
> 
> Agree this needs work.  I simply don't have time to be the active
> editor on the document.

I do, but I've held off working on the examples and appendices until I
have a better understanding of what to do about GS2/GSSAPI. Neither is
of any interest to me personally, but if anyone can suggest changes to
accommodate GS* without making the SASL mechanism harder to understand
or significantly harder to implement and test, I'll incorporate those
changes in the interests of achieving wider acceptance.

I haven't received any suggestions I can act upon yet, but Simon seems
to be working on merging his draft with SCRAM. I'll wait and see how
that works out.

-- ams