Re: protocol progress...

Stephen Farrell wrote:

> Hi Tom,
>
> Sorry for the slow response.
>
> Tom Wu wrote:
> >
> > Stephen,
> >
> > If uncertainty about the SASL-SRP draft is an issue, why not go with
> > SRP/TLS, or some other strong password solution?

There are IPR issues with SRP in general, so from this prospective there is no
difference between SASL-SRP and SRP/TLS.
Am I wrong?

> What's the status of the SRP/TLS work?
>
> > Item 2 requires a
> > weakening in the previously agreed-to security requirements, which seems
> > like a Bad Thing.
>
> I'm not sure that a zero-knowledge requirement was included, but in any
> case I guess we have to either make progress or wait until whatever issues
> bedevil SRP-SASL get solved.
>
> Stephen.

Alexey Melnikov
__________________________________________
R & D, ACI Worldwide/MessagingDirect
Richmond, Surrey, UK
Phone: +44 20 8332 4508

I speak for myself only, not for my employer.
__________________________________________