SXOVER: Make it really a -PLUS mechanism
The method for SASL Realm Crossover is called GS2-SXOVER-PLUS
, but it delegates the -PLUS
part to lower layers. Instead, funnel channel binding information into the key schedule, using #38 (closed) to import the entropy.
Current text:
Furthermore, only mechanisms supporting channel binding
SHOULD be supported, meaning that all strings in mechlist should have
a -PLUS ending.
That's perhaps silly and better to avoid.
Edited by Rick van Rein