RE: Compromise Authentication Proposal

[Paul Leach <paulle@microsoft.com>]

At Chicago, there was conditional concensus about using Digest as the MTI.
It was conditional upon a digest/SASL spec being delivered "in a couple of
weeks". It took a little longer than that, but I believe the precondition
has now been met, and still seems to be relevant.

After a private conversation with Tim Howes, he suggested I "call the
question". So here goes:

Are there any objections to making Digest/SASL the Mandatory-to-Implement
non-plaintext password mechanism? If so, what are they?

Are there any objections to making Digest/SASL the only
Mandatory-to-Implement mechanism? If so, what are they?

Paul