Am Do., 16. Juli 2020 um 10:13 Uhr schrieb Florian Schmaus <[email protected]>:

> If you send 'y', which implies that you, the client, did not select a
> -PLUS mechanism for authentication, while the server announces at least
> one SCRAM-*-PLUS mechanism, then the server may suspect a MitM attack
> and terminates the connection.

Yes. But that's the desired behaviour, no?
_______________________________________________
Standards mailing list
Info: https://mail.jabber.org/mailman/listinfo/standards
Unsubscribe: [email protected]
_______________________________________________

Reply via email to