On Sat, Sep 26, 2009 at 10:39:25AM +0200, Simon Josefsson wrote: > The server can store the password hashed in a couple of different forms, > and use the flag to determine which to use. I realize that is possible > anyway (just iterate through all locally stored hashes), although > without some text in the document I don't think many servers will > implement that. Yes, if we have a small number of stringprep profiles to use (which we arguably do). I'll think about whether this is worth it or troublesome. _______________________________________________ Ietf@xxxxxxxx https://www.ietf.org/mailman/listinfo/ietf