Re: [Emu] Issue #7: Password Authentication

2009-12-02 Thread Alan DeKok
Dan Harkins wrote: > Yes, I can propose a specific modification. In fact, I did already. It wasn't clear that the text was the suggested replacement. > It just got truncated from the thread. What I suggest is that in > section 3.1, in the middle of the first paragraph (the text that Joe > was

Re: [Emu] Issue #7: Password Authentication

2009-12-02 Thread Dan Harkins
Hi Alan, My heartburn over the "MUST tranport the username and password" text is that it seems to be mandating some particular deployment and not mandating functionality. The introductory text talks about cases where the authentication server does not have cleartext access to, or a consistent

Re: [Emu] Issue #7: Password Authentication

2009-12-02 Thread Alan DeKok
Dan Harkins wrote: > My heartburn over the "MUST tranport the username and password" text > is that it seems to be mandating some particular deployment and not > mandating functionality. Any authentication system that stores passwords has a limited set of choices. They can store clear-text, o

Re: [Emu] Issue #7: Password Authentication

2009-12-02 Thread Dan Harkins
Alan, Slicing up my posts and building up a straw man army is very distracting. You attempted to help by adding my comment to the problematic text. That didn't help, thanks for the effort though. Joe, Katrin, Steve, my comment remains. There is a property we need in the tunnel method and t

Re: [Emu] Issue #7: Password Authentication

2009-12-02 Thread Alan DeKok
Dan Harkins wrote: > Slicing up my posts and building up a straw man army is very > distracting. You attempted to help by adding my comment to the > problematic text. That didn't help, thanks for the effort though. You brought up specific concerns, and I pointed out that the document already a