[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Optional domain/realm for SCRAM? (Re: Crypto agility in SCRAM + draft-josefsson-password-auth?)
Hallvard B Furuseth <h.b.furuseth@xxxxxxxxxxx> writes:
> Simon Josefsson writes:
>> I'm not strongly opposed to realms, but if it leads to complexity in the
>> protocol, I think we should motivate it carefully.
>
> As far as I can tell, a realm is nothing but a salt common for all
> users on the server. SCRAM supports a salt.
That's what I tried to describe in many more words in my message to
Jeff.
> Am I missing something?
I'm with you, I think SCRAM already supports this model.
/Simon