Re: [sasl] MOGGIES Proposed Charter

[Kurt Zeilenga <[e-mail]>]

I am fine with the charter not specifically stating it will undertake revision of RFC 4422.  I see no burning need to undertake this work and personally rather wait for SASLprep to be sorted.

On the subject of SASLprep, I rather revision of RFC 4013 be worked in NewPrep.  The reason for this is two fold. 1) Expertise: I figure there is better chance of getting both SASL (and general security expertise) and Unicode/StringPrep expertise in the NewPrep forums than the MOGGIES forums.   2) SASLprep is used not only by SASL mechanisms but in various other systems, such as LDAP, I prefer a more neutral forum.

On the subject of "interface for reporting the security strength of GSS-API:  I note that I once wrote an I-D which kinds of relates to this.  <http://www.watersprings.org/pub/id/draft-zeilenga-auth-lvl-02.txt>.   Beyond that, I think this work item is a rat-hole and rather it not be on the charter.  Instead, I suggest folks pursue this on an individual/independent basis if they think they can come up with something useful here.

-- Kurt