Re: Password Authentication

I agree with most of your points about passwords.  However, the scenario
that you draw about extensions would imply that we should think about
mechanisms by which extensions to TLS may be made cleanly -- reserve some
record type numbers that are vendor-specific, and mandate that the rest
be not used except as officially sanctioned blah blah blah when/if TLS
gets revised.  If we don't do this, then we risk creating compatibility
problems in the future.

-bsy

--------
Bennet S. Yee		Phone: +1 619 534 4614	    Email: bsy@cs.ucsd.edu

Web:	http://www-cse.ucsd.edu/users/bsy/
USPS:	Dept of Comp Sci and Eng, 0114, UC San Diego, La Jolla, CA 92093-0114

Received on Thursday, 25 April 1996 13:47:45 UTC