This repository has been archived by the owner on Aug 3, 2021. It is now read-only.

Confidentiality and authentication without passwords #72

Open

jonkri opened this issue Jun 2, 2014 · 0 comments

Labels

SHOULD

Member

jonkri commented Jun 2, 2014

RFC 6120 states:

For both confidentiality and authentication without passwords, servers MUST and clients SHOULD implement TLS with the TLS_RSA_WITH_AES_128_CBC_SHA ciphersuite plus the SASL EXTERNAL mechanism (see Appendix A of [SASL]) with PKIX certificates.

jonkri added the SHOULD label

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.