Re: Comments on the GGF GSS-API extensions proposal

On Apr 7, 2004, at 12:28 PM, Nicolas Williams wrote:
> 2.  I oppose the credential delegation at any time concept.
>
>     Basically, I see no reason not to re-authenticate in order to
>     delegate fresh credentials.

I know that what the globus people have in mind is the possibility of 
delegating some credential other than the one that was used to 
authenticate the sesssion.  For example, to delegate lesser, or 
different rights to a remote process.

-++**==--++**==--++**==--++**==--++**==--++**==--++**==
This message was posted through the Stanford campus mailing list
server.  If you wish to unsubscribe from this mailing list, send the
message body of "unsubscribe ietf-cat-wg" to [email protected]