Re: The usability of service ticket lifetimes

Nico Williams <[email protected]> Tue, 21 Aug 2012 20:07:04 -0500
Newsgroups gmane.ietf.krb-wg
Message-ID <CAK3OfOizcUDvBvbvJ5g2ZOjVXnrH8fkLNZgTJkPF8qNHJSBZHQ@mail.gmail.com>
On Tue, Aug 21, 2012 at 7:56 PM, Martin Rex <[email protected]> wrote:
> Performing security context renegotiation for GSS-API requires to
> address a number of interesting problems:

Considering the GSI GSS mech that is TLS on the wire, and MSFT's API
to TLS which is basically SSPI, and how MSFT handles TLS re-nego in
that API, we could do the same in GSS.  BUT, it'd require app changes.

Nico
--
_______________________________________________
ietf-krb-wg mailing list
[email protected]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg