Re: Revised SAP draft submitted

[Colin Perkins <[e-mail]>]

--> "Peter T. Kirstein" writes:
>At 16:45 24/02/00 +0000, Colin Perkins wrote:
>>I've just submitted a revision to the session announcement protocol draft,
>>which addresses the comments I received during working group last call.
>>Until it appears in the internet-draft archives, the draft is available
>>from:
>>http://www.cs.ucl.ac.uk/staff/c.perkins/internet-drafts/draft-ietf-mmusic-sap-v2-05.txt
>
>I really cannot see why PGP must still be mandatory and  CMS Authentication
>optional. There is so much more momentum now behind CMS certificates for
>many purposes. I strongly recommend that this requirement be dropped. This
>is the only place where it is required; many of our server accesses now use
>the certificates provided by Web browsers - which are not PGP.

The reasons are primarily historical: at the time the text in question was
written CMS was considerably less prevalent than it is now. 

Since we now allow a variety of payload formats, some of which may include
authentication, I wonder if we should not change the draft to state that
both authentication formats are optional?

Colin