In message <199811241443.JAA06259@grosse.fugue.com>, Ted Lemon writes:
>> It would make it easier to integrate an authentication module written in
>> another style.

>Does this outweigh the additional cost of auditing the extra wrapper
>code for security problems?

I guess that would depend on how complicated the wrapper code needs to be.
It might well be worth it - the alternative is to port an authentication
scheme from one style to another, and then re-audit it for security problems.
It'd be better to do that audit once.

-s