ietf-asrg
[Top] [All Lists]

Re: [Asrg] Its all over for Challenge Response

2004-03-03 14:35:31
How many average users you'll find able to use ssh?

AD>   This is not an argument.  Those users are using MUAs.  The authors
AD> of those MUAs can do the work, and add a checkbox that the idiot users
AD> can use.

For the IETF, it is the _only_ argument.  Folks forget that we exist
to produce specifications that get used.  Not "implemented" but
actually used.

I gave ssh as an example to disprove the "I have to use the mailserver
provided by somebody who owns a wire to my house" claim.  Most MUAs
today are perfectly able to connect to arbitrary POP/IMAP servers and
MTAs, the user just fills in the boxes with the names of the machines
to use.

That is my point.  The nature and amount of incentive needed depends
on the cost and the benefit (along with a few other factors, of
course.) Any scheme that proposed massive change needs to pay quite
a bit of attention to the both of these.  That requires detailed
thinking, not a simple handwave.

It also depends on who needs to do what.  Something done at the server
level is likely to happen sooner than something done at the client
level, because there are fewer servers, their administrators tend to
be more knowledgeable, and the benefits can be greater.

Seth

_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg