SASL mechanism availability should take into account credential support. ------------------------------------------------------------------------ Key: ELY-175 URL: https://issues.jboss.org/browse/ELY-175 Project: WildFly Elytron Issue Type: Feature Request Components: SASL Reporter: Darran Lofthouse Assignee: David Lloyd Fix For: 1.0.0.Alpha3 One of the main reasons for having a getCredentialSupport API is so that we select appropriate authentication mechanisms based on the credentials available to us or the level of validation possible. This should also consider advertising all variants of a mechanism or strongest only. I will mention it here but we may want as a separate task some form of downgrade detection as this could be a sign of a malicious MITM.