<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>Plain, Digest, and Zero K authentication</TITLE>
<META content="MSHTML 5.50.4522.1800" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=848042223-18042001><FONT face=Arial color=#0000ff size=2>As far
as I can tell its just a choice of security. The Digest password is hased with
the adition of the "random id" sent from the server ..... via the
handshake.</FONT></SPAN></DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> Matt Diez
[mailto:matt@vedalabs.com]<BR><B>Sent:</B> Wednesday, April 18, 2001 6:48
PM<BR><B>To:</B> 'jdev@jabber.org'<BR><B>Subject:</B> [JDEV] Plain, Digest,
and Zero K authentication<BR><BR></FONT></DIV>
<P><FONT face=Arial size=2>Can anyone point out to me the advantages of a
plantext or digest-based</FONT> <BR><FONT face=Arial size=2>password
authentication scheme? </FONT></P>
<P><FONT face=Arial size=2>Which of you are actively using digest and
plaintext based authentication</FONT> <BR><FONT face=Arial size=2>and what
benefits do you derive from this?</FONT> </P>
<P><FONT face=Arial size=2>Just a survey, Thanks.</FONT> </P><BR>
<P><FONT face=Arial size=2>Matthew D. Diez</FONT>
</P></BLOCKQUOTE></BODY></HTML>