[ietf-nntp] AUTHINFO draft 01

[Russ Allbery]

Charles Lindsey <chl at clerew.man.ac.uk> writes:

> So what USEFOR needs to know is whether the _intention_ of the
> authinfo-identity is to be "open" or "cryptic" - and clearly, if it is a
> working email address, as suggested, then it is "open", because it
> identifies the originator immediately. If that is the case, then I think
> USEFOR would need to invent a posting-authinfo parameter for the purpose
> (otherwise, posting-account would do).

> So please, what is the current practice with other SASL implementations
> (especially the SMTP one)?

The SASL identity should generally immediately identify the user.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>