Dave Cridland wrote:

> If I ruled the world, I'd mandate TLS+SCRAM, and have a SHOULD for
> TLS+YAP (the latter being plaintext-equiv on the server, but only a
> single round-trip, so great for mobiles).

Well it seems to be early days for SCRAM and YAP, so we'll have to wait
for one or both of them to advance to Proposed Standard before we
recommend their use in rfc3920bis.

Peter

-- 
Peter Saint-Andre
https://stpeter.im/

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to