Simple auth and TLS (Was: authmeth review notes [long])

[Hallvard B Furuseth <h.b.furuseth@usit.uio.no>]

Michael Ströder writes:
>Kurt D. Zeilenga wrote:
>> 
>>  LDAP implementations SHOULD support the simple DN/password mechanism
>>  of the simple Bind method (as detailed in Section X).
> 
> s/SHOULD/MUST/
> 
>>  Implementations
>>  which support this mechanism MUST be capable of protecting it by
>>  establishment (as discussed in Section 3) of TLS. 
> 
> s/MUST/SHOULD/

Still wrong.  Together, these changes require implementations that do
not support TLS, to implement a security hole.

-- 
Hallvard