Issue 73: PWD Algorithm (UH) and UIS algorithm (UI) are these
obsolete and were never well used
Possible options below:
Option
Comment
As is – 1 char field indicating encryption algorithm. Left
to implementation how to interpret character
Keep 1 char field indicating encryption algorithm. List
of characters and corresponding algorithm maintained
in specification
Replace with unlimited string field indicating
encryption algorithm
No interoperability, and hence unlikely
to be used
Overhead of the need to maintain list of
algorithms used in specification
Remove entirely from messages – choice of encryption
used by server conveyed out of band (e.g. server
documentation)
Remove entirely from messages – encryption used by
server sent in Status message response
Remove entirely from messages – password sent in
clear
Need list of canonical names for
encryption algorithms – does one
already exist?
Lack of interoperability. Difficulty
troubleshooting
Need list of canonical names. Bootstrap
problems if a login message is required.
Passwords in clear test – but not an
issue if communication pipe is encrypted
via SSL