[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Poll: use of TLS channel bindings in SCRAM



On Fri, May 29, 2009 at 01:36:07AM -0400, Jeffrey Hutzelman wrote:
> Yup, that's it.  Except...
> 
>  - Clients SHOULD choose the highest-layer/innermost end-to-end TLS
>    channel as the channel to bind to;
> 
> That is, s/MUST/SHOULD/, to avoid inadvertently prohibiting clients from 
> binding to a channel type other than TLS.

Ah, yes, I wasn't sure about that.