title: Security & Authentication: SSL vs SASL
body: <p>My understanding is that SSL combines an encryption algorithm (like AES, DES, etc.) with a key exchange method (like Diffie-Hellman) to provide secure encryption and identification services between two endpoints on an un-secure network (like the Internet).</p>
  
  <p>My understanding is that SASL is an MD5/Kerberos protocol that pretty much does the same thing.</p>
  
  <p>So my question: what are the pros/cons to choosing both and what scenarios make either more preferable? Basically, I'm looking for some guidelines to follow when choosing SSL or to go with SASL instead. Thanks in advance!</p>