Darran Lofthouse created SASL-30: ------------------------------------ Summary: Update the JBoss Local User mechanism so it is not flagged as a plain text mechanism. Key: SASL-30 URL: https://issues.jboss.org/browse/SASL-30 Project: JBoss SASL Provider Issue Type: Task Security Level: Public (Everyone can see) Reporter: Darran Lofthouse Assignee: Darran Lofthouse Fix For: 1.0.1.CR1 The tokens exchanged by the jboss local user mechanism are both single use and associated with the specific connection so it is not susceptible to plain text attacks like the plain mechanism. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira