ietf
[Top] [All Lists]

Re: Last Call: draft-ietf-sasl-scram

2009-09-28 13:52:50
On Sat, Sep 26, 2009 at 10:39:25AM +0200, Simon Josefsson wrote:
The server can store the password hashed in a couple of different forms,
and use the flag to determine which to use.  I realize that is possible
anyway (just iterate through all locally stored hashes), although
without some text in the document I don't think many servers will
implement that.

Yes, if we have a small number of stringprep profiles to use (which we
arguably do).  I'll think about whether this is worth it or troublesome.
_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/ietf