Which recipient are we authenticating for?
Niels Möller
nisse at lysator.liu.se
07 Oct 2004 13:01:37 +0200
Linus Nordberg <linus@nordberg.se> writes:
> We need a way to express which sender/recipient pair a given
> XHASHCASHAUTH is authenticating, in the case of multiple RCPT TO.
Correct, when moving the XHASHCASH* things before RCPT TO, more
information must be provided by the client.
And it applies not only to authentication, but also to challenge
response (since the salt/resource/hashcash input depends on the
recipient).
/Niels