[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[KEYPROV] Issue#14: Shall we send authentication ID in a separate field or the same value in part of authentication value?



For issue#14: http://www.tschofenig.priv.at:8080/keyprov/issue14 Ming wrote:


There are two proposals to send authentication code over HTTP:

	<AuthenticationData>
	  <ClientID>ID</ClientID>
         <AuthenticationCodeDigest>MIabcdefghidjklmn==
         </AuthenticationCodeDigest>
	</AuthenticationData>

where ID is carried by ClientID, or alternatively, concatenate ID into the AuthenticationCodeDigest with a newly introduced algorithm ID for the value derivation.

	<AuthenticationData>
         <AuthenticationCodeDigest>ID | MIabcdefghidjklmn==
         </AuthenticationCodeDigest>
	</AuthenticationData>

I prefer to use the former style.



Thoughts?




_______________________________________________ KEYPROV mailing list KEYPROV at ietf.org https://www1.ietf.org/mailman/listinfo/keyprov