Re: [pcp] Server's auth policy discovery

[Sam Hartman <[e-mail]>]

Hi.
As I've mentioned previously, I consider DHCP-based discovery of auth
policy a significant down-side to an approach that requires it.

For many of the same reasons that you want to avoid one port for
authentication and one port for the protocol, you want to avoid one
system for security policy discovery with another system for using that
policy.  Tightly-coupled systems are easier to debug and support.  In
this particular case, if auth policy discovery is in-band, you avoid the
failure modes where the discovery solution has bad information.

--Sam