Framework for authentication and data security in Internet protocols
Simple Authentication and Security Layer (SASL) is aframework forauthentication anddata security in Internetprotocols. It decouples authentication mechanisms fromapplication protocols, in theory allowing any authentication mechanism supported by SASL to be used in any application protocol that uses SASL. Authentication mechanisms can also supportproxy authorization, a facility allowing one user to assume the identity of another. They can also provide adata security layer offeringdata integrity anddata confidentiality services. DIGEST-MD5 provides an example of mechanisms which can provide a data-security layer. Application protocols that support SASL typically also supportTransport Layer Security (TLS) to complement the services offered by SASL.
John Gardiner Myers wrote the original SASL specification (RFC 2222) in 1997. In 2006, that document was replaced by RFC 4422 authored by Alexey Melnikov and Kurt D. Zeilenga. SASL, as defined by RFC 4422 is anIETFStandard Track protocol and is, as of 2006[update], aProposed Standard.
Application protocols define their representation of SASL exchanges with aprofile. A protocol has aservice name such as "ldap" in a registry shared withGSSAPI andKerberos.[7]
As of 2012[update] protocols currently supporting SASL include:
