[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Clarifying the qualities we desire the DIGEST-MD5 replacement to have
At 2008-03-12 09:33:43 -0500, Chris.Newman@xxxxxxx wrote:
> > Regarding the SCRAM draft, I hope there'll be a version soon which
> > spells out what each challenge and response consists of, and what
> > the server must remember (or be able to construct). It's cumbersome
> > to dig around in the parameter descriptions in order to figure that
> > out.
> Agree this needs work. I simply don't have time to be the active
> editor on the document.
I do, but I've held off working on the examples and appendices until I
have a better understanding of what to do about GS2/GSSAPI. Neither is
of any interest to me personally, but if anyone can suggest changes to
accommodate GS* without making the SASL mechanism harder to understand
or significantly harder to implement and test, I'll incorporate those
changes in the interests of achieving wider acceptance.
I haven't received any suggestions I can act upon yet, but Simon seems
to be working on merging his draft with SCRAM. I'll wait and see how
that works out.