Re: Closing on shared-key authentication

> - The only security reason for including password auth in TLS is that
>   it gains stronger security by having access to strong crypto in the
>   export case.  I don't think we should include features this major
>   based solely on brain-damaged US export regulations that will
>   hopefully soon change.

Seems to me that's only if you assume the best way to secure password
auth is to just encrypt the password, as opposed to using other
more sophisticated methods.  It also is true only if you're willing
to accept authentication that is dependent upon the security of
the encryption; some people feel this is undesrable for reasons
having nothing to do with export regulations.