<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>There was some discussion back in 2011 (not that I subscribed to this list back then) about a SASL BrowserID mechanism.</div><div><br></div><div>We have a new GSS mechanism supporting BrowserID (aka Persona) that works with the GS2 bridge in Cyrus SASL.</div><div><br></div><div>You may download the code here:</div><div><br></div><div><a href="https://github.com/PADL/gss_browserid">https://github.com/PADL/gss_browserid</a></div><div><br></div><div>And read the protocol specification here:</div><div><br></div><div><a href="http://tools.ietf.org/id/draft-howard-gss-browserid-01.txt">http://tools.ietf.org/id/draft-howard-gss-browserid-01.txt</a></div><div><br></div><div>Note that unlike the Mozilla BrowserID SASL mechanism, this mechanism supports channel binding, replay detection, fast re-authentication, mutual authentication and interactive credentials acquisition (you don't need to cut and paste an assertion in).</div><div><br></div><div>(It also supports message protection services, but this irrelevant when used with GS2.)</div><div><br></div>-- Luke<div><br><div apple-content-edited="true">
<span class="Apple-style-span" style="border-collapse: separate; font-family: 'Akzidenz-Grotesk BQ'; border-spacing: 0px; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: 'Akzidenz-Grotesk BQ'; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>--</div><div>Luke Howard / <a href="mailto:lukeh@padl.com">lukeh@padl.com</a></div><div><a href="http://www.padl.com">www.padl.com</a> / <a href="http://www.lukehoward.com">www.lukehoward.com</a></div></div></span></span></div></div></body></html>