Peter Saint-Andre <stpeter at stpeter.im> writes: > The SASL SCRAM mechanism is currently in IETF Last Call: > > http://www.ietf.org/internet-drafts/draft-ietf-sasl-scram-07.txt > > This mechanism is intended to replace DIGEST-MD5. Does it make sense for > the XMPP WG to specify SCRAM as mandatory-to-implement? Yes. (although I'm not a XMPP implementer) Did XMPP make use of DIGEST-MD5 security layers, in theory (specification) and in practice (implementations)? /Simon
Note Well: Messages sent to this mailing list are the opinions of the senders and do not imply endorsement by the IETF.