[ https://issues.jboss.org/browse/ELY-1283?page=com.atlassian.jira.plugin.s... ] Farah Juma commented on ELY-1283: --------------------------------- In [RFC-5802 Section 6|https://tools.ietf.org/html/rfc5802#section-6], it says that both the PLUS and non-PLUS mechanisms should be offered when channel binding is supported. We're currently offering the mechanisms in the following order, which is what's causing the non-PLUS mechanisms to get attempted first: {code} SCRAM_SHA_1 SCRAM_SHA_1_PLUS SCRAM_SHA_256 SCRAM_SHA_256_PLUS SCRAM_SHA_384 SCRAM_SHA_384_PLUS SCRAM_SHA_512 SCRAM_SHA_512_PLUS {code} I think we should change this order so that the PLUS mechanisms are offered first, as shown below. WDYT? {code} SCRAM_SHA_1_PLUS SCRAM_SHA_256_PLUS SCRAM_SHA_384_PLUS SCRAM_SHA_512_PLUS SCRAM_SHA_1 SCRAM_SHA_256 SCRAM_SHA_384 SCRAM_SHA_512 {code} -- This message was sent by Atlassian JIRA (v7.2.3#72005)