RE: New draft TAG finding - Passwords in the Clear

Thanks, I have that reference and should have added it.  I'll update the
draft with this info..
-Ed
 

-----Original Message-----
From: www-tag-request@w3.org [mailto:www-tag-request@w3.org] On Behalf
Of Thomas Roessler
Sent: Tuesday, October 03, 2006 12:12 PM
To: Dan Connolly; Vincent.Quint@inrialpes.fr; www-tag@w3.org
Subject: Re: New draft TAG finding - Passwords in the Clear


On 2006-10-03 20:57:07 +0200, Thomas Roessler wrote:

> I was about to point at draft-iab-auth-mech-*.txt; however, the latest

> iteration of that one has expired from the IETF archives.
> 
> I've pinged EKR about the document's current state.

"Just resting" was the response.

Meanwhile, the current version is here:
  http://ietfreport.isoc.org/all-ids/draft-iab-auth-mech-05.txt

Also, see "Strong Security Requirements for IETF Standard Protocols":
  ftp://ftp.rfc-editor.org/in-notes/rfc3365.txt

Cheers,
-- 
Thomas Roessler, W3C   <tlr@w3.org>