On Wed, Apr 3, 2019 at 6:02 PM, Melvin Keskin <me...@olomono.de> wrote:
I appreciate that you think of UX aspects but ATT should not degrade
UX
when another way of authentication is implemented alongside it. For
ATT
no user interaction is needed and it can always be used. It is not
necessary to deactivate it. It can just be extended by other
mechanisms covering other cases.
The problem is that ATT resolves the same problem as EAX does (by
putting the burden on CAs). So we have two conflicting approaches.
_______________________________________________
Standards mailing list
Info: https://mail.jabber.org/mailman/listinfo/standards
Unsubscribe: standards-unsubscr...@xmpp.org
_______________________________________________
