Re: security requirements

On Oct 20, 2006, at 12:49 PM, Ingo Struck wrote:

> Imho one of the "bunch of new mechanisms" could be a re-written  
> clean-up
> of the existing ones (a well-done conforming rfc2617 Digest-auth MD5
> implementation can feature e.g. session-timeout, controlled log-off,
> one-shot nonces for requests with side-effects and the like).

Speaking personally:  +1.

Lisa