Re: [xmpp] SASL errors in 3920bis-03

[Tobias Markmann <tmarkmann at googlemail.com>]

On Tue, Nov 17, 2009 at 8:52 AM, Alexey Melnikov <alexey.melnikov at isode.com> wrote:

But there might be another use case for the error code - selection of a mechanism which is considered too weak for a particular user. In such case the server would advertise the mechanism to everybody, but return the error for some users.

So you're are suggesting to use the mechanism-too-weak error for per-user authentication profiles since you initially can only have them on per-domain basis. But then again how should the client know what to chose for the current user? Try each advertised mechanism and after 20 round trips finally find one that doesn't respond with an mechanism-too-error?

Which client does provide manual SASL mechanism choice so the user could select a more secure mechanism?

-- 
Tobias Markmann
http://ayena.de