Dear Zammad team,
Can you add supports of :
- SCRAM-SHA-1
- SCRAM-SHA-1-PLUS
- SCRAM-SHA-256
- SCRAM-SHA-256-PLUS
- SCRAM-SHA-512
- SCRAM-SHA-512-PLUS
- SCRAM-SHA3-512
- SCRAM-SHA3-512-PLUS
You can add too:
- SCRAM-SHA-224
- SCRAM-SHA-224-PLUS
- SCRAM-SHA-384
- SCRAM-SHA-384-PLUS
“When using the SASL SCRAM mechanism, the SCRAM-SHA-256-PLUS variant SHOULD be preferred over the SCRAM-SHA-256 variant, and SHA-256 variants [RFC7677] SHOULD be preferred over SHA-1 variants [RFC5802]”.
-
SCRAM-SHA-1(-PLUS):
– RFC 5802: Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms
– RFC 6120: Extensible Messaging and Presence Protocol (XMPP): Core -
SCRAM-SHA-256(-PLUS):
– RFC 7677: SCRAM-SHA-256 and SCRAM-SHA-256-PLUS Simple Authentication and Security Layer (SASL) Mechanisms since 2015-11-02
– RFC 8600: Using Extensible Messaging and Presence Protocol (XMPP) for Security Information Exchange since 2019-06-21: RFC 8600 on Using Extensible Messaging and Presence Protocol (XMPP) for Security Information Exchange -
SCRAM-SHA-512(-PLUS):
– draft-melnikov-scram-sha-512-02 -
SCRAM-SHA3-512(-PLUS):
– draft-melnikov-scram-sha3-512-02
https://xmpp.org/extensions/inbox/hash-recommendations.html
-PLUS variants:
- RFC5056: On the Use of Channel Bindings to Secure Channels: RFC 5056: On the Use of Channel Bindings to Secure Channels
- RFC5929: Channel Bindings for TLS: RFC 5929: Channel Bindings for TLS
- Channel-Binding Types: Channel-Binding Types
- RFC 9266: Channel Bindings for TLS 1.3: RFC 9266: Channel Bindings for TLS 1.3
IMAP:
- RFC9051: Internet Message Access Protocol (IMAP) - Version 4rev2: RFC 9051: Internet Message Access Protocol (IMAP) - Version 4rev2
LDAP:
- RFC5803: Lightweight Directory Access Protocol (LDAP) Schema for Storing Salted: Challenge Response Authentication Mechanism (SCRAM) Secrets: RFC 5803: Lightweight Directory Access Protocol (LDAP) Schema for Storing Salted Challenge Response Authentication Mechanism (SCRAM) Secrets
HTTP:
- RFC7804: Salted Challenge Response HTTP Authentication Mechanism: RFC 7804: Salted Challenge Response HTTP Authentication Mechanism
2FA:
- Extensions to Salted Challenge Response (SCRAM) for 2 factor authentication: draft-melnikov-scram-2fa-03
IANA:
- Simple Authentication and Security Layer (SASL) Mechanisms: Simple Authentication and Security Layer (SASL) Mechanisms
Linked to: