[Beepcore-java-users] Re: Beepcore-java-users digest, Vol 1 #76 - 8 msgs

[Darren N. <dn...@sa...>]

> > If this were setup at the session layer, the profile would be blissfully
> > unaware of what is running underneath it (unless that info is
> > specifically requested form the session).  It would be the job of the
> > session to determine whether a profile has enough
> > authentication/encryption/etc in place.  How would it determine this?

The problem comes when you add the requirement
  SMTP checks that the "From:" address belongs to the user 
  who logged in via SASL.

All of a sudden, you're back to having SMTP no longer blissfully unaware of
SASL any more.

-- 
Darren New 
San Diego, CA, USA (PST). Cryptokeys on demand.
   ** http://images.fbrtech.com/dnew/ **

They looked up at me like I was a T-bone steak
  walking into an all-you-can-eat seafood buffet.