Subject: Re: RFC4121 hash agility semantics?

From: Sam Hartman <[email-masked]>
Date: Wed, 12 Apr 2006 18:29:26 -0400

>>>>> "Nicolas" == Nicolas Williams <[email-masked]> writes:

    Nicolas>  - let the initiator do both and hope the server knows
    Nicolas> how to not-MD5 and oh well if it doesn't

I think this is the right option.

If things get bad enough that we want to forbid md5, we can include a
special bogus md5 value.

--Sam