Alternative password SASL authentication mechanims

[Kurt Zeilenga <[e-mail]>]

I draw your attention to two individual submissions proposing new
password SASL authentications mechanisms as alternatives...

Title		: The Hash Exchange Authentication SASL Mechanism
Author(s)	: D. Cridland, A. Melnikov
Filename	: draft-cridland-sasl-hexa-00.txt
Pages		: 12
Date		: 2007-2-28
	
    This memo defines and discusses a SASL mechanism that is based on  
the
    exchange of hashes.  It does not require the storage of a plaintext
    equivalent on the server, is simple to implement, and provides a
    reasonable level of security.

Title		: SASL Yet Another Password Mechanism
Author(s)	: K. Zeilenga
Filename	: draft-zeilenga-sasl-yap-00.txt
Pages		: 7
Date		: 2007-2-27
	
   This document describes a password authentication mechanism, called
   YAP-SHA-256, for use in protocols support Simple Authentication and
   Security Layer (SASL) framework.  The mechanism relies on security
   services provided by a lower layer, such as Transport Layer Security
   (TLS), to protect the authentication exchange, and subsequent
   application data exchange, from common attacks.  The YAP-SHA-256
   mechanism may be viewed as an alternative to other password-based  
SASL
   mechanism, such as PLAIN, CRAM-MD5, and DIGEST-MD5.