Best Practices for Use of SASL EXTERNAL with Certificates

This document specifies best practices for XMPP usage of the SASL EXTERNAL mechanism in the context of PKIX certificates.