Re: Auth method negotiation

[Paul Koning <ni1d@arrl.net>]

Excerpt of message (sent 21 June 2002) by Bill Studenmund:
> On Fri, 21 Jun 2002, Paul Koning wrote:
> 
> > Excerpt of message (sent 21 June 2002) by Bill Studenmund:
> > > I'm not sure. What does everyone else think? If the T bits indicate that
> > > both sides are fine with skipping authentication, does AuthMethods matter?
> >
> > I would tend to think of it as a protocol error.  If one part of the
> > message indicates that you're insisting on authentication, and another
> > part sasys that you are insisting on not doing authentication, you
> > must be confused, right?
> 
> Uhm, yeah. Makes sense.
> 
> But do we say that if you don't want to authenticate, you MUST choose None
> as your one AuthMethod? 

I would say yes; what else could you choose to express that desire?  I
think I must be missing something.  "None" means "I don't want to do
any explicit authentication" and some other value X means "I want to
use mechanism X".

    paul