On Tuesday 15 September 2009 13:33:08 Peter Saint-Andre wrote: > On 9/15/09 6:20 AM, Simon Josefsson wrote: > > To use SCRAM (or CRAM-MD5 or DIGEST-MD5) you need a secure channel. If > > you used DIGEST-MD5 with security layers you will need SCRAM+TLS > > instead. SCRAM does not provide any SASL security layers. I hope you > > weren't using DIGEST-MD5 security layers, because they weren't that > > good... > > As mentioned, I don't think that anyone was using DIGEST-MD5 security > layers in XMPP. If I'm wrong about that I'd love to be corrected. Psi supports this feature but nobody knows it. You have to pair the client with cyrus-sasl, which is not how we ship by default. I'm not aware of anyone using DIGEST-MD5 security layers in practice. That's a shame, because I do think it's a useful feature. Even if the security isn't that good, it's certainly better than unchecked TLS (something people still do today). -Justin
Note Well: Messages sent to this mailing list are the opinions of the senders and do not imply endorsement by the IETF.