[jboss-jira] [JBoss JIRA] (ELY-175) SASL mechanism availability should take into account credential support.

[Darran Lofthouse (JIRA)]

Darran Lofthouse created ELY-175:
------------------------------------

             Summary: SASL mechanism availability should take into account credential support.
                 Key: ELY-175
                 URL: https://issues.jboss.org/browse/ELY-175
             Project: WildFly Elytron
          Issue Type: Feature Request
          Components: SASL
            Reporter: Darran Lofthouse
             Fix For: 1.0.0.Alpha1


One of the main reasons for having a getCredentialSupport API is so that we select appropriate authentication mechanisms based on the credentials available to us or the level of validation possible.

This should also consider advertising all variants of a mechanism or strongest only.

I will mention it here but we may want as a separate task some form of downgrade detection as this could be a sign of a malicious MITM.




--
This message was sent by Atlassian JIRA
(v6.3.11#6341)