[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [xmpp] SCRAM as MTI?



Peter Saint-Andre <stpeter at stpeter.im> writes:

> The SASL SCRAM mechanism is currently in IETF Last Call:
>
> http://www.ietf.org/internet-drafts/draft-ietf-sasl-scram-07.txt
>
> This mechanism is intended to replace DIGEST-MD5. Does it make sense for
> the XMPP WG to specify SCRAM as mandatory-to-implement?

Yes. (although I'm not a XMPP implementer)

Did XMPP make use of DIGEST-MD5 security layers, in theory
(specification) and in practice (implementations)?

/Simon

Note Well: Messages sent to this mailing list are the opinions of the senders and do not imply endorsement by the IETF.