Subject: [KEYPROV] Issue#14: Shall we send authentication ID in a separate field or the same value in part of authentication value?

From: Hannes Tschofenig <[email-masked]>
Date: Fri, 08 Jun 2007 19:00:43 +0200

For issue#14: http://www.tschofenig.priv.at:8080/keyprov/issue14 Ming wrote: 

There are two proposals to send authentication code over HTTP:

	<AuthenticationData>
	  <ClientID>ID</ClientID>
          <AuthenticationCodeDigest>MIabcdefghidjklmn==
          </AuthenticationCodeDigest>
	</AuthenticationData>

where ID is carried by ClientID, or alternatively, concatenate ID into the 
AuthenticationCodeDigest with a newly introduced algorithm ID for the value 
derivation.

	<AuthenticationData>
          <AuthenticationCodeDigest>ID | MIabcdefghidjklmn==
          </AuthenticationCodeDigest>
	</AuthenticationData>

I prefer to use the former style.

Thoughts? 

_______________________________________________
KEYPROV mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/keyprov