# HG changeset patch
# User Tobias Markmann <tm@ayena.de>
# Date 1258119063 -3600
# Node ID fa46d158c95f021761d9f8a2d1d365ce14744b05
# Parent  e79c0ce6cf543d90df297ac9c543133446c62e8f
Adding a note for possible round trip savings.

diff -r e79c0ce6cf54 -r fa46d158c95f util/sasl/digest-md5.lua
--- a/util/sasl/digest-md5.lua	Fri Nov 13 11:24:22 2009 +0100
+++ b/util/sasl/digest-md5.lua	Fri Nov 13 14:31:03 2009 +0100
@@ -214,6 +214,7 @@
 			KD = HA1..":"..response["nonce"]..":"..response["nc"]..":"..response["cnonce"]..":"..response["qop"]..":"..HA2
 			local rspauth = md5(KD, true);
 			self.authenticated = true;
+			--TODO: considering sending the rspauth in a success node for saving one roundtrip; allowed according to http://tools.ietf.org/html/draft-saintandre-rfc3920bis-09#section-7.3.6
 			return "challenge", serialize({rspauth = rspauth});
 		else
 			return "failure", "not-authorized", "The response provided by the client doesn't match the one we calculated."