[sasl] [Editorial Errata Reported] RFC5802 (2640)

RFC Errata System <rfc-editor@rfc-editor.org> Mon, 22 November 2010 10:47 UTC

To: chris.newman@oracle.com, ams@toroid.org, Alexey.Melnikov@isode.com, Nicolas.Williams@oracle.com, turners@ieca.com, tim.polk@nist.gov, tlyu@mit.edu, kurt.zeilenga@isode.com
From: RFC Errata System <rfc-editor@rfc-editor.org>
Message-Id: <20101122104758.05AE8E06B1@rfc-editor.org>
Date: Mon, 22 Nov 2010 02:47:58 -0800
Cc: sasl@ietf.org, jehan@zemarmot.net, rfc-editor@rfc-editor.org
Subject: [sasl] [Editorial Errata Reported] RFC5802 (2640)
Precedence: list

The following errata report has been submitted for RFC5802,
"Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms".

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata_search.php?rfc=5802&eid=2640

--------------------------------------
Type: Editorial
Reported by: Jehan Pagès <jehan@zemarmot.net>

Section: 5

Original Text
-------------
The server verifies the nonce and the proof, verifies that the
authorization identity (if supplied by the client in the first
message) is authorized to act as the authentication identity, and,
finally, it responds with a "server-final-message", concluding the
authentication exchange.

Corrected Text
--------------
The server verifies the nonce and the proof, verifies that the
authentication identity is authorized to act as the authorization
identity (if supplied by the client in the first message) , and,
finally, it responds with a "server-final-message", concluding the
authentication exchange.

Notes
-----
It is the authentication identity which acts as (if authorized to) the authorization identity, not the opposite.

Instructions:
-------------
This errata is currently posted as "Reported". If necessary, please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party (IESG)
can log in to change the status and edit the report, if necessary.

--------------------------------------
RFC5802 (draft-ietf-sasl-scram-11)
--------------------------------------
Title : Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms
Publication Date : July 2010
Author(s) : C. Newman, A. Menon-Sen, A. Melnikov, N. Williams
Category : PROPOSED STANDARD
Source : Simple Authentication and Security Layer
Area : Security
Stream : IETF
Verifying Party : IESG

[sasl] [Editorial Errata Reported] RFC5802 (2640) RFC Errata System