Re: Challenge Response ?

On Sun, Feb 08, 2004 at 04:24:24PM +0000, Paul Crowley wrote:
> You're still thinking too much like today's protocols.  The correct
> requirement is
>
> - Users should have a way of authenticating themselves to a website as
> a recipient of a particular email address
See

http://www.danisch.de/work/security/txt/draft-danisch-scaf-00.txt 
or
http://www.ietf.org/internet-drafts/draft-danisch-scaf-00.txt

regards
Hadmut