Re: #22

>>>>> "Michael" == Michael Thomas <[email protected]> writes:

    Michael> In fact, I'd be willing to wager that KINK is the _only_
    Michael> Kerberized application that has any notion of PFS right
    Michael> now which really illustrates why if people think that PFS
    Michael> is important, it ought to be done up a level.


You'd lose the wager; the GSSAPI support for ssh does PFS.


I do agree PFS should be supported at a higher level in Kerberos
though; that is on krb-wg's agenda to enable.

--Sam