Re: kerberos-referrals-13 - text clarification needed

>>>>> "Zhanna" == Zhanna Tsitkova <[email protected]> writes:

    Zhanna> Hi, The beginning of the section 4.1 reads: "Two realms
    Zhanna> participate in any cross-realm relationship: an issuing
    Zhanna> realm issues a cross-realm ticket and a consuming realm uses
    Zhanna> this ticket.  There is a degree of trust of the issuing
    Zhanna> realm by the consuming realm implicit in this relationship."
    Zhanna> Would it be possible to clarify the last sentence?

The intent was that the entire rest of the section served to clarify the
summary given in the first paragraph.

    Zhanna> Then, later in this section "Creating a cross-realm
    Zhanna> relationship implies relatively little inherent trust in the
    Zhanna> issuing realm.  Significant trust only applies as principals
    Zhanna> dependent on that issuing realm are given access to
    Zhanna> resources.  However, two deployment constraints may imply
    Zhanna> significantly greater trust is implied by the initial
    Zhanna> cross-realm relationship." - the last sentence needs clearer
    Zhanna> wording, I think.

Could you try to explain what is unclear about it or propose an
alternate wording?
I've worked with the text enough that it's hard for me to tell any more
what's hard to understand and what needs additional clarification.

    Zhanna> In section 3 "The client should expect, when sending names
    Zhanna> with the "canonicalize" KDC option, that names in the KDC's
    Zhanna> reply MAY be different than the name in the request." I
    Zhanna> suggest to have "MAY be different than the names in the
    Zhanna> request".
This is a good catch; thanks.
_______________________________________________
ietf-krb-wg mailing list
[email protected]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg