[jboss-jira] [JBoss JIRA] (ELY-252) Take into account username after failed authentication for available mechs

[Darran Lofthouse (JIRA)]

     [ https://issues.jboss.org/browse/ELY-252?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse updated ELY-252:
---------------------------------
    Fix Version/s:     (was: 1.3.0.CR1)


> Take into account username after failed authentication for available mechs
> --------------------------------------------------------------------------
>
>                 Key: ELY-252
>                 URL: https://issues.jboss.org/browse/ELY-252
>             Project: WildFly Elytron
>          Issue Type: Task
>          Components: SASL
>            Reporter: Darran Lofthouse
>
> This is something we would need to be cautious about as it does risk revealing information to an attacker but after a files attempt we may have more information and be able to offer mechanisms based on this.



--
This message was sent by Atlassian JIRA
(v7.5.0#75005)