Dave Cridland wrote: > If I ruled the world, I'd mandate TLS+SCRAM, and have a SHOULD for > TLS+YAP (the latter being plaintext-equiv on the server, but only a > single round-trip, so great for mobiles).
Well it seems to be early days for SCRAM and YAP, so we'll have to wait for one or both of them to advance to Proposed Standard before we recommend their use in rfc3920bis. Peter -- Peter Saint-Andre https://stpeter.im/
smime.p7s
Description: S/MIME Cryptographic Signature