Everything about Simple Authentication and Security Layer
Framework for authentication and data security in Internet protocols
Simple Authentication and Security Layer (SASL) is a framework for authentication and data security in Internet protocols. It decouples authentication mechanisms from application protocols, in theory allowing any authentication mechanism supported by SASL to be used in any application protocol that uses SASL. Authentication mechanisms can also support proxy authorization, a facility allowing one user to assume the identity of another. They can also provide a data security layer offering data integrity and data confidentiality services. DIGEST-MD5 provides an example of mechanisms which can provide a data-security layer. Application protocols that support SASL typically also support Transport Layer Security (TLS) to complement the services offered by SASL. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: Simple Authentication and Security LayerA 5-minute orientation
- Pick up a classic book: Invitation to Computer ScienceThe most-reprinted book on the subject
- Go sideways: SMTP AuthenticationA closely related topic
- Go sideways: Generic Security Services Application Programming InterfaceA closely related topic
📖 Definitions
No dictionary entry for this exact phrase.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
- No matching papers found.
📚 Books worth reading
Invitation to Computer ScienceG. Michael Schneider, Judith L. Gersting · 1995
Data Communications and NetworkingBehrouz A. Forouzan, Catherine Ann Coombs · 2000
TCP/IP IllustratedW. Richard Stevens, Kevin R. Fall · 1993
The Book of PostfixPatrick Koetter, Ralf Hildebrandt · 2005
Understanding cryptographyChristof Paar · 2010
Mathematical and Engineering Methods in Computer ScienceA. Kučera · 2013
Business data communicationsManish Agrawal · 2011
Foundations of computer scienceBehrouz A. Forouzan · 2002
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- SMTP Authentication SMTP Authentication, often abbreviated SMTP AUTH, is an extension of the Simple Mail Transfer Protocol (SMTP) whereby a client may log in using any authenticati…
- Generic Security Services Application Programming Interface The Generic Security Service Application Programming Interface (GSSAPI, also GSS-API) is an application programming interface for programs to access security…
- Salted Challenge Response Authentication Mechanism In cryptography, the Salted Challenge Response Authentication Mechanism (SCRAM) is a family of modern, password-based challenge–response authentication…
- Security Support Provider Interface Security Support Provider Interface (SSPI) is a component of Windows API that performs security-related operations such as authentication. SSPI functions…
- CRAM-MD5 In cryptography, CRAM-MD5 is a challenge–response authentication mechanism (CRAM) based on the HMAC-MD5 algorithm. As one of the mechanisms supported by…
- Post Office Protocol In computing, the Post Office Protocol (POP) is an application-layer Internet standard protocol used by e-mail clients to retrieve e-mail from a mail server…
- Kerberos (protocol) Kerberos (/ˈkɜːr.bər.ɒs/) is a computer-network authentication protocol that works on the basis of tickets to allow nodes communicating over a non-secure…
- Transport Layer Security Transport Layer Security (TLS) is a cryptographic protocol designed to provide secured communications over a computer network, such as the Internet. The…