Re: Authentication Methods for LDAP - last call (mandatory CRAM-MD5)

[Jeff.Hodges@stanford.edu]

Just to clarify, when I said..

> So I think we should pay at least some attention to it and not sweep
> it under  the rug. I think profiling its use with LDAP in AuthMeth
> would be a good thing  to do. 

..I did not necessarily mean that we should hold up forwarding the AuthMeth 
doc to the IESG in order to add Kerberos profiling to it. I think, tho, that 
we should be figuring out whether to add it to the doc at another stage in the 
standards process or to do yet another doc or what, and probably start 
drafting up the language.

But, I would not be utterly surprised to have them send it back and ask us to 
add it. I do not have an idea what probability this has in reality. On the 
surface I'd say small, but I really just don't know.

Jeff