Re: [Emu] Crypto-binding in TTLS-v0

2007-08-23 Thread Alan DeKok
Sam Hartman wrote: > The consensus of the SASL and Kerberos communities has been different. > In particular, these communities believe that it is strongly desirable > that the same password when entered on two different systems actually > work. Well, yes. But is it a real problem, or a theoreti

Re: [Emu] Crypto-binding in TTLS-v0

2007-08-23 Thread Alan DeKok
Gene Chang (genchang) wrote: > - Passwords aren't just a random number. > - Users often need mnemonic aids to accurately reproduce their > passwords. This is why often passwords are related to words or phrases. The key is "related". But they're not words, and we should not treat them as such.

RE: [Emu] Crypto-binding in TTLS-v0

2007-08-23 Thread Gene Chang \(genchang\)
> -Original Message- > From: Alan DeKok [mailto:[EMAIL PROTECTED] > Sent: Thursday, August 23, 2007 5:31 AM > To: Gene Chang (genchang) > Cc: Hao Zhou (hzhou); Sam Hartman; emu@ietf.org > Subject: Re: [Emu] Crypto-binding in TTLS-v0 > > Gene Chang (genchang) wrote: > > - Passwords aren't