Subject: [sasl] Mechanism Negotiation and Channel Binding with SCRAM

From: Tobias Markmann <[email-masked]>
Date: Sat, 27 Feb 2010 20:29:44 +0100

Hi,

In http://www.ietf.org/id/draft-ietf-sasl-scram-11.txt , Section 6, Bullet Point No 2 it says:
> If the client negotiates mechanisms then the client MUST select
> SCRAM-<hash-function>-PLUS if offered by the server and the client
> wants to select SCRAM with the given hash function. Otherwise...

How are clients supposed to behave if they don't support channel binding? Selecting SCRAM-<hash function>-PLUS doesn't make a lot sense in that case. However if that is the intended behavior it would be nice to have it more explicit in the text; or is the whole 'Channel Binding' section to be ignored if channel binding isn't supported by the client when it comes to protocol assertions?

Cheers,
Tobias