Re: Poll: pure SCRAM versa SCRAM-as-GS2

[Kurt Zeilenga <[e-mail]>]

Question regarding the GS2-SCRAM specification.

I see no language in draft-newman-auth-scram-gs2-00.txt which says  
whether it or the specifications detailing the SASL-GS2, GSS-API, GSS- 
API-SCRAM are definitive.

Which will be?

I don't think 'neither' or 'both' is an appealing (to me) answer here.

I would argue that if we further pursue the scram-gs2 approach, I  
would favor the approach suggested by Simon.  That is, SCRAM-GS2 be  
informational.   I would add that SCRAM-GS2 should include text that  
clearly states it is not definitive.

-- Kurt


On Feb 5, 2009, at 1:14 PM, Alexey Melnikov wrote:

>
> Folks,
> I would like to solicit feedback from people regarding the choice  
> between 2 SCRAM versions:
> http://tools.ietf.org/id/draft-newman-auth-scram-08.txt
> and
> http://tools.ietf.org/id/draft-newman-auth-scram-gs2-00.txt
>
> You can use the following URL to see changes between them:
> http://tools.ietf.org//rfcdiff?url1=http://tools.ietf.org/id/draft-newman-auth-scram-08.txt&url2=http://tools.ietf.org/id/draft-newman-auth-scram-gs2-00.txt
>
> Please send your opinion on which version you prefer (and a short  
> explanation of why) to the mailing list, or say if you need more  
> information.
>
> I would like to get all answers before February 19th, please.
>
> Regards,
> Alexey
>