[jboss-dev-forums] [Design of Security on JBoss] - Re: SRP and SASL

"scott.stark(a)jboss.org" wrote : But can't you pass in the verifier as the "password'? You could. That would be kind of ugly though. PasswordCallback sends in a char[]; you'd have to send in the verifier, salt, N, and generater values all encoded in the password somehow. "scott.stark(a)jboss.org" wrote : I guess I would have to see what the current mapping of srp to sasl is. Is it checked in somewhere? I hadn't bothered checking it in because it doesn't actually *work* yet. But on the other hand, that hasn't stopped me before, so... https://svn.jboss.org/repos/sandbox/david.lloyd/remoting3/core-proto/impl... View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4096984#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...