[NNTP] AUTHINFO diffs

[Ken Murchison]

Russ Allbery wrote:
> Ken Murchison <ken at oceana.com> writes:
> 
> 
>>Here's the diffs between AUTHINFO-08 and what I currently have.  I
>>*believe* is addresses all issues.  Please review.
> 
> 
> Are we really okay with going back to the old DIGEST-MD5?  I thought the
> SASL working group didn't really like that idea and would rather that we
> wait up for the new revision.

Right, the suggestions are to wait for the updated DIGEST-MD5 or go with 
  TLS+PLAIN.  We just need to select at least one mandatory to implement 
(not necessarily mandatory to use) mechanism, so that two conforming 
implementations can always be configured to interoperate.

IMO, PLAIN is the simplest to implement, but this is going to then 
mandate that every implementation also supports TLS.  The only mechanism 
other than PLAIN or DIGEST-MD5 which we could mandate would probably be 
GSSAPI.

-- 
Kenneth Murchison     Oceana Matrix Ltd.
Software Engineer     21 Princeton Place
716-662-8973 x26      Orchard Park, NY 14127
--PGP Public Key--    http://www.oceana.com/~ken/ksm.pgp