[jboss-jira] [JBoss JIRA] (SASL-30) Update the JBoss Local User mechanism so it is not flagged as a plain text mechanism.

Sat Apr 21 05:51:17 EDT 2012

Darran Lofthouse created SASL-30:
------------------------------------

             Summary: Update the JBoss Local User mechanism so it is not flagged as a plain text mechanism.
                 Key: SASL-30
                 URL: https://issues.jboss.org/browse/SASL-30
             Project: JBoss SASL Provider
          Issue Type: Task
      Security Level: Public (Everyone can see)
            Reporter: Darran Lofthouse
            Assignee: Darran Lofthouse
             Fix For: 1.0.1.CR1

The tokens exchanged by the jboss local user mechanism are both single use and associated with the specific connection so it is not susceptible to plain text attacks like the plain mechanism.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira