Re: [apps-discuss] [saag] [kitten] HTTP authentication: the next generation

[Alan DeKok <[e-mail]>]

Yoav Nir wrote:
> Because I'd rather not implement too many mechanisms in my browser or in my web server.
> 
> And if EAP integrates better with RADIUS,

  It's more "already integrated with RADIUS", and "RADIUS integrates
with LDAP".

> while SASL integrates better with LDAP, it's still bad design to expose the server's backend to the client by the authentication protocol.

  EAP is already being transported over PPP, ethernet, RADIUS, Diameter,
and other transport/authentication protocols.  It's used because adding
it is easy, and it separates the authentication protocols from the
application.

  As for SASL, that's not my area.

  Alan DeKok.