<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN"> <HTML> <HEAD> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8"> <META NAME="GENERATOR" CONTENT="GtkHTML/4.6.6"> </HEAD> <BODY> On Wed, 2014-09-03 at 20:26 +0200, Lennart Poettering wrote: <BLOCKQUOTE TYPE=CITE> <PRE> + <entry><literal>PERMIT_INTERACTIVE_AUTHENTICATION</literal></entry> </PRE> </BLOCKQUOTE> I think that the flag needs to be inverted. If we look today, services are expecting that clients will allow interactive authentication and the flag is set to zero. So a service would either have to break existing clients or somehow determine whether they knew about the flag to make a good choice. If a '1' there was made to be requesting a short reply the current assumption about zero today would be adequate no mater if the caller was aware of the new flag or not. Also, I think we should add at the same time a standard error for "you wanted quick, but I need interactive." (though it seems errors are only described in the spec in relation to specific messages, so I'm not sure where to put it) Ted </BODY> </HTML>