Re: [jose] #161 Password Considerations

> -----Original Message-----
> From: jose-bounces@ietf.org [mailto:jose-bounces@ietf.org] On Behalf Of
> Manger, James H
> Sent: Sunday, November 10, 2013 4:36 PM
> To: Mike Jones; Matt Miller (mamille2); <jose@ietf.org>
> Subject: Re: [jose] #161 Password Considerations - Proposed Text
> 
> > ----------
> > From: Mike Jones [mailto:Michael.Jones@microsoft.com]
> >
> > I believe that the following text addresses the encoding issue that
> > James raised:
> >
> > 	  The PBES2 password input is an octet sequence;
> > 	  if the password to be used is represented as a text string
> > 	  rather than an octet sequence, the UTF-8 encoding of the text
string
> > 	  SHOULD be used as the octet sequence.
> >
> > If you'd like to see any changes made to it, please propose specific
> > edits.
> >
> > (The SASLPREP text is already present in the Internationalization
> > Considerations section.)
> >
> > 				Thanks,
> > 				-- Mike
> 
> 
> At least change SHOULD to MUST.

If it is not changed then there needs to be a lot of description about why
this is not a MUST.  If this is the case then it would be logical that two
different implementations could do different decisions and never
interoperate.

I would say that we should make a normative reference to the
draft-melnikov-precis-saslprepbis as well.  If not then we will probably get
hit by the ADs.

Jim

> 
> --
> James Manger
> _______________________________________________
> jose mailing list
> jose@ietf.org
> https://www.ietf.org/mailman/listinfo/jose