Skip to content

SCRAM-SHA-1(-PLUS) + SCRAM-SHA-256(-PLUS) + SCRAM-SHA-512(-PLUS) + SCRAM-SHA3-512(-PLUS) supports #39732

Closed

Description

@Neustradamus

Dear @nextcloud team,

Can you add supports of :

  • SCRAM-SHA-1
  • SCRAM-SHA-1-PLUS
  • SCRAM-SHA-256
  • SCRAM-SHA-256-PLUS
  • SCRAM-SHA-512
  • SCRAM-SHA-512-PLUS
  • SCRAM-SHA3-512
  • SCRAM-SHA3-512-PLUS

You can add too:

  • SCRAM-SHA-224
  • SCRAM-SHA-224-PLUS
  • SCRAM-SHA-384
  • SCRAM-SHA-384-PLUS

SCRAM-SHA-1(-PLUS):

SCRAM-SHA-256(-PLUS):

SCRAM-SHA-512(-PLUS):

SCRAM-SHA3-512(-PLUS):

-PLUS variants:

IMAP:

LDAP:

  • RFC5803: Lightweight Directory Access Protocol (LDAP) Schema for Storing Salted: Challenge Response Authentication Mechanism (SCRAM) Secrets: https://tools.ietf.org/html/rfc5803

HTTP:

2FA:

IANA:

Linked to:

Thanks in advance.

Activity

  1. joshtrichards commented on Aug 6, 2023

    @joshtrichards
    Member

    Duplicate of symfony/symfony#51292 and more of an upstream matter.

  2. Neustradamus commented on Aug 8, 2023

    @Neustradamus
    Author

    @joshtrichards, @solracsf: I think it is needed to keep this ticket opens, and look to have another solution than Symfony for security.

  3. Neustradamus commented on Aug 18, 2023

    @Neustradamus
    Author

    Dear @nextcloud team, @joshtrichards, @solracsf: In PHP, there is:

    You can add the support into Nextcloud for security?

  4. solracsf commented on Aug 18, 2023

    @solracsf
    Member
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    0. Needs triagePending check for reproducibility or if it fits our roadmapenhancement

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions