Re: Simple+TLS as mandatory-to-implement (RE: Issues with current authmeth draft.)

[Mark Ennis <mark.ennis@adacel.com>]

My preference is for a digest (or similar challenge/response) 
authentication mechanism which allows distinguished names as a form of 
the authentication identity.

- Mark.

Kurt D. Zeilenga wrote:
> At 09:43 PM 5/13/2003, Mark Ennis wrote:
>
> > With regards to an alternative mandatory-to-implement authentication mechanism which is more secure than using cleartext passwords, I would like to see one which allows for distinguished names as one form of the authentication identity, but would be reluctant to support mandatory implementation of startTLS extended operation to achieve this if it can be avoided.
>
>
> Does your desire to avoiding StartTLS outweigh your desire for
> credentials with LDAPDNs?  Or does your desire for credentials
> with LDAPDNs outweigh your desire to avoid StartTLS?
>
> Kurt