CRAM-SHA1 support

[Lothar May]

Hi,

I found an old git entry in gsasl:

"* Version 0.2.4 (released 2005-01-01)
 ** The CRAM-MD5 mechanism is now preferred over DIGEST-MD5.
This decision was based on recent public research that suggest MD5 is
broken, while HMAC-MD5 not immediately compromised, and the lack of
public analysis on what consequences the MD5 break have for
DIGEST-MD5.  Support for CRAM-SHA1 is under investigation, to enable
users to avoid MD5 completely."

Any news on this? I would like to use CRAM-SHA1 - DIGEST-MD5 is tagged
as "historic", and CRAM-MD5 "potentially" broken.

Thanks,
Lothar