Subject: RE: DIGEST-MD5 interop issue

From: "Paul Leach" <[email-masked]>
Date: Fri, 13 Aug 2004 10:05:21 -0700

> -----Original Message-----
> From: [email-masked]
[mailto:[email-masked]]
> On Behalf Of Jeffrey Hutzelman
> Sent: Friday, August 13, 2004 7:52 AM
> To: Kurt D. Zeilenga; Alexey Melnikov
> Cc: SASL WG
> Subject: Re: DIGEST-MD5 interop issue
> 
> The reason for the SHOULD is that the server has indicated which
realms it
> is willing/able to accept, and it's expected that the server will
usually
> reject any other realms.
[Paul Leach] The server may also accept names in the realm "fbi.gov",
but may not want to advertise that fact. Clients that have out of band
knowledge about the realms supported may attempt to authenticate using
one of those realms.

Hence it is not "expected" that another realm will fail. The inverse: it
can not be expected that it will succeed without OOB info.