3 ms·
SASL is an authentication protocol, which improves the way e.g. NickServ login is performed, allowing connections to be established more quickly. What is the a
by blfr 11y ago
SASL is an authentication protocol, which improves the way e.g. NickServ login is performed, allowing connections to be established more quickly.
What is the advantage of using SASL over logging in with a client SSL certificate?
- dozzie 11y agoUser and password management? With client X.509 certificates it's difficult, e.g. issuing them is not fun. Moving them around is more troublesome than with a login+password pair, too. Also, try explaining client certificates to non-technical people, who probably are among the target audience of IRCv3 initiative.
- M2Ys4U 11y agoYou can use TLS client certificates with SASL using the EXTERNAL mechanism.
- jcranmer 11y agoSASL is a protocol that allows you to mix several different schemes. You could (if the server supports it) use GSSAPI (e.g., authenticate using Kerberos or Active Directory, i.e., the backend for enterprises). You could instead use, say, EAP. Or you could use OAuth 2. Or you could use SSL certificates. Or you could forgo any of that and just use CRAM-MD5 or SCRAM-SHA-1 or SCRAM-SHA-256 for regular password authentication. Or, if you're really lazy, you could just use a plaintext user/password combination.
- Throwaway10323 11y agohttps://gist.github.com/grawity/3813822 https://gist.github.com/grawity/3813822