Menu
Home
People
Places
Arts
History
Plants & Animals
Science
Life & Culture
Technology
Reference.org
Simple Authentication and Security Layer
open-in-new
<p>Simple Authentication and Security Layer (SASL) is a <a href="/facts/Software_framework/EWasA8sG">framework</a> for <a href="/facts/Authentication/64y4S69b">authentication</a> and <a href="/facts/Data_security/VApktKQD">data security</a> in Internet <a href="/facts/Communications_protocol/5uady7cB">protocols</a>. It decouples authentication mechanisms from <a href="/facts/Application_protocol/FAFhLruA">application protocols</a>, in theory allowing any authentication mechanism supported by SASL to be used in any application protocol that uses SASL. Authentication mechanisms can also support <i>proxy authorization</i>, a facility allowing one user to assume the identity of another. They can also provide a <i>data security layer</i> offering <i>data integrity</i> and <i>data confidentiality</i> services. DIGEST-MD5 provides an example of mechanisms which can provide a data-security layer. Application protocols that support SASL typically also support <a href="/facts/Transport_Layer_Security/pGy16TnA">Transport Layer Security</a> (TLS) to complement the services offered by SASL. </p><p>John Gardiner Myers wrote the original SASL specification (RFC 2222) in 1997. In 2006, that document was replaced by RFC 4422 authored by Alexey Melnikov and Kurt D. Zeilenga. SASL, as defined by RFC 4422 is an <a href="/facts/IETF/tIcCsFhX">IETF</a> <i>Standard Track</i> protocol and is, as of 2006, a <i><a href="/facts/Internet_Standard/LT6VEfhg">Proposed Standard</a></i>. </p>