Skip to content
This repository has been archived by the owner on Jan 29, 2024. It is now read-only.

SCRAM-SHA-1-PLUS support #35

Closed
COM8 opened this issue Aug 17, 2018 · 6 comments
Closed

SCRAM-SHA-1-PLUS support #35

COM8 opened this issue Aug 17, 2018 · 6 comments

Comments

@COM8
Copy link
Member

COM8 commented Aug 17, 2018

Bevor you create a new issue:

- [x] I searched for similar issues and did not find one
- [x] I'm using the latest version available in the [Windows Store](https://www.microsoft.com/store/apps/9NW16X9JB5WV)

I'm submitting a...:

  • Feature request (UserVoice request: )

Current behavior:

No SCRAM-SHA-1-PLUS support.

Expected behavior:

SCRAM-SHA-1-PLUS support.

Minimal reproduction of the problem with instructions:

Environment:

App Version(s): 
v.X.Y.Z <!-- Which version of the App are you using (e.g. v.0.2.0) -->

Windows 10 Version Number: <!-- https://en.wikipedia.org/wiki/Windows_10_version_history -->
- [ ] 1809
- [ ] 1803
- [ ] 1709
- [ ] 1703
- [ ] 1607
- [ ] 1511
- [ ] 1507
- [ ] Insider Build (build number: )
- [ ] Misc:

Device form factor:
- [ ] Desktop
- [ ] Mobile
- [ ] Xbox
- [ ] Surface Hub

Where did you got the APP from?
- [ ] [Windows Store](https://www.microsoft.com/store/apps/9NW16X9JB5WV)
- [ ] Self-build, using a provided release source
- [ ] Self-build, repo cloned at [dd.mm.yyy] <!-- When did you clone the repo! -->
- [ ] Misc, got it from... <!-- Please tell us your source! -->

@Neustradamus
Copy link

Neustradamus commented Aug 21, 2019

"When using the SASL SCRAM mechanism, the SCRAM-SHA-256-PLUS variant SHOULD be preferred over the SCRAM-SHA-256 variant, and SHA-256 variants [RFC7677] SHOULD be preferred over SHA-1 variants [RFC5802]".

After SCRAM-SHA-1(-PLUS):

Now there is SCRAM-SHA-256(-PLUS):

Linked to:

@COM8
Copy link
Member Author

COM8 commented Aug 21, 2019

Ohm... I don't really get what you want to tell me with this paper.
I read the first 5 chapters and don't get it.
It says in the introduction: "[...] primarily for the purpose of communication among Computer Security Incident Response Teams and associated entities."

And it defines an so called XMPP-Grid which "[...] collect and distribute security incident reports and other security-relevant information among network platforms[...]"

Where is the connection to UWPX? Or is it just a cool paper you wanted to share?

So please talk to me and give me a little bit more information. I can't read minds (at the moment at least) 😉

@Neustradamus
Copy link

It is about support of:

  • SCRAM-SHA-256(-PLUS)
  • and the old SCRAM-SHA-1(-PLUS)

@COM8
Copy link
Member Author

COM8 commented Aug 21, 2019

And this means?

@Neustradamus
Copy link

Neustradamus commented Aug 21, 2019

"When using the SASL SCRAM mechanism, the SCRAM-SHA-256-PLUS variant SHOULD be preferred over the SCRAM-SHA-256 variant, and SHA-256 variants [RFC7677] SHOULD be preferred over SHA-1 variants [RFC5802])."

@COM8
Copy link
Member Author

COM8 commented Sep 2, 2019

Closing this since all required information are available in #51.

@COM8 COM8 closed this as completed Sep 2, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants