document that nonce-based authentication is for the future

[hippotat.git] / PROTOCOL

diff --git a/PROTOCOL b/PROTOCOL
index ae64db8d148c24bfab720d72656130c7267ec419..cf6eacfc554a034c2e663f78945af7c4942220f6 100644 (file)
--- a/PROTOCOL
+++ b/PROTOCOL
@@ -10,7 +10,9 @@ It's a multipart/form-data.
 
 Authentication: for now, plaintext password
 
-Routing assistance: none needed; secnet polypath will DTRT
+Routing assistance: none in hippotat; can be requested on client
+ from userv-ipif via `vroutes' parameter.  Use with secnet polypath
+ ideally uses the special support in secnet 0.4.x.
 
 Client form parameters (multipart/form-data):
  m             metadata, newline-separated list (text file) of
@@ -22,7 +24,8 @@ Client form parameters (multipart/form-data):
 
 
 
-Future nonce-based authentication:
+
+Possible future nonce-based authentication:
 
 server keeps big nonce counter for each client
 meaning is: