Thu, 09 Apr 2026 16:44:59 +0000 https://bugs.horde.org/ticket/15146 SCRAM-SHA-1(-PLUS) + SCRAM-SHA-256(-PLUS) + SCRAM-SHA-512(-PLUS) + SCRAM-SHA3-512(-PLUS) supports Dear Horde team, I know that you have already done a little a long time ago but can you add for IMAP/POP/SMTP and more, the supports of : - SCRAM-SHA-1 - SCRAM-SHA-1-PLUS - SCRAM-SHA-256 - SCRAM-SHA-256-PLUS - SCRAM-SHA-512 - SCRAM-SHA-512-PLUS - SCRAM-SHA3-512 - SCRAM-SHA3-512-PLUS You can add too: - SCRAM-SHA-224 - SCRAM-SHA-224-PLUS - SCRAM-SHA-384 - SCRAM-SHA-384-PLUS "When using the SASL SCRAM mechanism, the SCRAM-SHA-256-PLUS variant SHOULD be preferred over the SCRAM-SHA-256 variant, and SHA-256 variants [RFC7677] SHOULD be preferred over SHA-1 variants [RFC5802]". SCRAM-SHA-1(-PLUS): - https://tools.ietf.org/html/rfc5802 - https://tools.ietf.org/html/rfc6120 SCRAM-SHA-256(-PLUS): - https://tools.ietf.org/html/rfc7677 since 2015-11-02 - https://tools.ietf.org/html/rfc8600 since 2019-06-21: https://mailarchive.ietf.org/arch/msg/ietf-announce/suJMmeMhuAOmGn_PJYgX5Vm8lNA SCRAM-SHA-512(-PLUS): - https://tools.ietf.org/html/draft-melnikov-scram-sha-512 SCRAM-SHA3-512(-PLUS): - https://tools.ietf.org/html/draft-melnikov-scram-sha3-512 -PLUS variants: - RFC5056: On the Use of Channel Bindings to Secure Channels: https://tools.ietf.org/html/rfc5056 - RFC5929: Channel Bindings for TLS: https://tools.ietf.org/html/rfc5929 - Channel-Binding Types: https://www.iana.org/assignments/channel-binding-types/channel-binding-types.xhtml - RFC9266: Channel Bindings for TLS 1.3: https://tools.ietf.org/html/rfc9266 IMAP: - RFC9051: Internet Message Access Protocol (IMAP) - Version 4rev2: https://tools.ietf.org/html/rfc9051 LDAP: - RFC5803: Lightweight Directory Access Protocol (LDAP) Schema for Storing Salted: Challenge Response Authentication Mechanism (SCRAM) Secrets: https://tools.ietf.org/html/rfc5803 HTTP: - RFC7804: Salted Challenge Response HTTP Authentication Mechanism: https://tools.ietf.org/html/rfc7804 2FA: - Extensions to Salted Challenge Response (SCRAM) for 2 factor authentication: https://tools.ietf.org/html/draft-melnikov-scram-2fa IANA: - Simple Authentication and Security Layer (SASL) Mechanisms: https://www.iana.org/assignments/sasl-mechanisms/sasl-mechanisms.xhtml Linked to: - https://github.com/scram-xmpp/info/issues/1 Thanks in advance Sun, 06 Aug 2023 03:09:01 +0000 https://bugs.horde.org/ticket/15146#t94138 Dear @horde team, SCRAM in Horde code: https://github.com/search?q=org%3Ahorde+scram&type=code SCRAM-SHA-1 has done by Michael M Slusarz in 2015, thanks a lot! - https://github.com/horde/Imap_Client/commit/10e5741039f6ef8c6b740eb6fc6a48936c6ecc09 When I look history: https://github.com/horde/Imap_Client/commits/master/lib/Horde/Imap/Client/Auth/Scram.php Jan Schneider: https://github.com/yunosh Michael M Slusarz: https://github.com/slusarz In PHP, there is a lib: - https://github.com/pear/Auth_SASL/blob/master/Auth/SASL/SCRAM.php Can you add the support of more? Thanks in advance. Regards, Neustradamus Fri, 18 Aug 2023 03:01:52 +0000 https://bugs.horde.org/ticket/15146#t94141