Re: DRAFT Montreal minutes
Nicolas Williams <[email protected]>
| Newsgroups | gmane.ietf.ips |
|---|---|
| Message-ID | <[email protected]> |
On Thu, Aug 03, 2006 at 04:32:17PM -0400, [email protected] wrote: > > > - SASL has an SPKM-3 method. > > > > SASL has no SPKM-3 mechanism. The GSS-API does (see below). > > My sloppiness - what Nico describes about SASL having a generic > GSS-API bridge (GS2) in the works that will provide a means to > use SPKM3 is what I had in mind. Assuming that SPKM-3 progresses. But more importantly, you'll get all GSS-API mechanisms (we'll probably get more GSS mechs over time, starting with GSS bindings of DIGEST-MD5 or something of the sort), and that's architecturally what you want: an hole to be filled by others, that way you leave PKI to SPKM-3 without having to even mention it (except as a REQUIRED mechanism, but I think it'd be hard to REQUIRE anything other than Kerberos V at the moment). _______________________________________________ Ips mailing list [email protected] https://www1.ietf.org/mailman/listinfo/ips