node-ldapjs icon indicating copy to clipboard operation
node-ldapjs copied to clipboard

RFC6331: Moving DIGEST-MD5 to Historic

Open Neustradamus opened this issue 3 years ago • 3 comments

Dear @ldapjs team,

In first, I wish you a Happy New Year!

20 November 2008: CRAM-MD5 to Historic:

  • https://tools.ietf.org/html/draft-ietf-sasl-crammd5-to-historic-00

29 June 2017: CRAM-MD5 to Historic:

  • https://tools.ietf.org/html/draft-zeilenga-luis140219-crammd5-to-historic-00

July 2011: RFC6331: Moving DIGEST-MD5 to Historic:

  • https://tools.ietf.org/html/rfc6331

August 2021: RFC9051: Internet Message Access Protocol (IMAP) - Version 4rev2: "Replaced DIGEST-MD5 SASL mechanism with SCRAM-SHA-256. DIGEST-MD5 was deprecated."

  • https://tools.ietf.org/html/rfc9051

I add same about SCRAM-MD5.

There are now:

  • July 2010: RFC5802: Salted Challenge Response Authentication Mechanism (SCRAM): SASL and GSS-API Mechanisms: https://tools.ietf.org/html/rfc5802 (SCRAM-SHA-1 and SCRAM-SHA-1-PLUS)
  • July 2010: RFC5803: Lightweight Directory Access Protocol (LDAP) Schema for Storing Salted: Challenge Response Authentication Mechanism (SCRAM) Secrets: https://tools.ietf.org/html/rfc5803
  • November 2015: RFC7677: SCRAM-SHA-256 and SCRAM-SHA-256-PLUS: Simple Authentication and Security Layer (SASL) Mechanisms: https://tools.ietf.org/html/rfc7677

Soon:

  • SCRAM-SHA-512(-PLUS): https://tools.ietf.org/html/draft-melnikov-scram-sha-512
  • SCRAM-SHA3-512(-PLUS): https://tools.ietf.org/html/draft-melnikov-scram-sha3-512

Neustradamus avatar Jan 10 '22 08:01 Neustradamus

What is the action you are expecting with creating this issue? How does this relate to the ldapjs source code?

jsumners avatar Jan 10 '22 12:01 jsumners

@jsumners: Thanks for your reply!

  • https://github.com/ldapjs/node-ldapjs/search?q=md5

Neustradamus avatar Jan 10 '22 13:01 Neustradamus

Would you like to submit a pull request to solve this issue?

jsumners avatar Jan 10 '22 13:01 jsumners

👋

On February 22, 2023, we released version 3 of this library. As a result, we are closing this issue/pull request.

Please see issue #839 for more information, including how to proceed if you feel this closure is in error.

jsumners avatar Feb 22 '23 19:02 jsumners