Title: RE: [security-services] Proposal to add new AuthenticationMethod
I agree with this, but the URI: should be consistent with current scheme for things defined in RFCs. See below.
> With this email I'd like to propose that we add an identifier
> for Secure
> Remote Password (SRP) protocol (specified in RFC 2945) to the list of
> AuthhenticationMethods. Brifely, SRP is based on Diffie-Hellman and
> provides a more secure way of authenticating based on a
> password (or for
> that matter any number of secrets). The proposed change
> would be to add
> the following to section 7.1 of Core:
>
> Secure Remote Passowrd (SRP)
> URI: urn:oasis:names:tc:SAML:1.0:am:SRP
For consitency this should be:
URI: urn:ietf:rfc:2945
> The authentication was performed by means of Secure Remote Password
> protocol as specified in RFC 2945
Hal
