opie unloved?

Roberto C. Sánchez roberto at connexer.com
Sat Apr 23 20:14:51 UTC 2011


On Fri, Apr 15, 2011 at 08:26:26AM -0500, Dan White wrote:
> On 15/04/11 09:17 +0100, Alexander Clouter wrote:
> >Hi,
> >
> >I'm guessing OPIE is being killed off because of the following?
> >
> >http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622220
> >http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622221
> >http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622246
> >
> >RFC2289/OPIE is rather important to me (it solves a problem that all the
> >new fango/fashionable OTP systems do not) so I'm happy to pick up the
> >baton and jump through all the hoops to maintain this.
> 
> Out of curiosity, do any of you use the cyrus sasl otp mechanism with OPIE?
> I personally prefer the internal auxprop version of the mechanism. However,
> if OPIE gets reintroduced at some point, it might make sense to ask the
> cyrus-sasl maintainers to create two versions of the mechanism (if demand
> and resources permit).
> 
I do use OPIE (on my webmail server, to allow me to comfortably log in
from untrusted systems).  However, I do not use it with SASL.  I don't
recall all of the specific reasons why I ended up choosing OPIE, but I
do recall that one reason had to do with the fact that the webmail
(Squirrel Mail) could not present the first part of the OTP, so I needed
an implementation that did not issue a challenge.  At the time I set it
up, OPIE was the only option in Debian that had that.

Regards,

-Roberto

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-cyrus-sasl2-debian-devel/attachments/20110423/c9d8d68e/attachment.pgp>


More information about the Pkg-cyrus-sasl2-debian-devel mailing list