>IIRC, the Cyrus SASL effort was started AFTER RFC 2222 was >published. SASL was, of course, invented at same company >which invented SSL (TLS), Netscape. And, of course, SASL was >initially targeted for IMAP.
The above is mostly incorrect. SASL originated in the IMAP4 AUTHENTICATE command. When it became apparent that the authentication protocol framework provided by the AUTHENTICATE command in IMAP4 would be generally useful, it was split out into a seperate specification (SASL, RFC2222). SASL was first implemented in the Cyrus IMAP4 and IMSP servers (although it wasn't called SASL at the time). This work pre-dated John Myers' joining Netscape by quite some time. The standalone Cyrus SASL library appeared in conjunction with the release of the Cyrus version 2 IMAP4 server. --lyndon
