RE: [security-services] Proposal to add new AuthenticationMethod

[Hal Lockhart <hal.lockhart@entegrity.com>]

Title: RE: [security-services] Proposal to add new AuthenticationMethod

I agree with this, but the URI: should be consistent with current scheme for things defined in RFCs. See below.

> With this email I'd like to propose that we add an identifier
> for Secure
> Remote Password (SRP) protocol (specified in RFC 2945) to the list of
> AuthhenticationMethods. Brifely, SRP is based on Diffie-Hellman and
> provides a more secure way of authenticating based on a
> password (or for
> that matter any number of secrets).  The proposed change
> would be to add
> the following to section 7.1 of Core:
>
> Secure Remote Passowrd (SRP)
> URI: urn:oasis:names:tc:SAML:1.0:am:SRP

For consitency this should be:

URI: urn:ietf:rfc:2945

> The authentication was performed by means of Secure Remote Password
> protocol as specified in RFC 2945

Hal