Re: protocol progress...

Alexey Melnikov wrote:
> Stephen Farrell wrote:
> 
> 
>>Hi Tom,
>>
>>Sorry for the slow response.
>>
>>Tom Wu wrote:
>>
>>>Stephen,
>>>
>>>If uncertainty about the SASL-SRP draft is an issue, why not go with
>>>SRP/TLS, or some other strong password solution?
>>>
> 
> There are IPR issues with SRP in general, so from this prospective there is no
> difference between SASL-SRP and SRP/TLS.
> Am I wrong?

Did you have a specific IPR issue that concerned you?  Stanford's 
royalty-free IPR statement is on file with the IETF.  We should be 
careful not to make decisions based on rumors.

>>What's the status of the SRP/TLS work?
>>
>>
>>>Item 2 requires a
>>>weakening in the previously agreed-to security requirements, which seems
>>>like a Bad Thing.
>>>
>>I'm not sure that a zero-knowledge requirement was included, but in any
>>case I guess we have to either make progress or wait until whatever issues
>>bedevil SRP-SASL get solved.
>>
>>Stephen.
>>
> 
> Alexey Melnikov
> __________________________________________
> R & D, ACI Worldwide/MessagingDirect
> Richmond, Surrey, UK
> Phone: +44 20 8332 4508
> 
> I speak for myself only, not for my employer.
> __________________________________________
> 
> 

Tom

-- 
Tom Wu
Principal Software Engineer
Arcot Systems
(408) 969-6124
"The Borg?  Sounds Swedish..."