Re: GSS-API SRP mech (was Re: retrying keyex ...)

[Sam Hartman <hartmans%mit.edu@localhost>]

>>>>> "Tom" == Tom Wu <tom%arcot.com@localhost> writes:

    Tom> Joel N. Weber II wrote:
    >> In theory, you can use that SASL mechanism with an intergrity
    >> protection layer.  In practice, since it appears that the SASL
    >> SRP mechanism basically does the things you want a Secure Shell
    >> key exchange to accomplish, it may be better to define a new
    >> Secure Shell key exchange algorithm to support SRP.

    Tom> There are implementations of SRP as an SSH key exchange
    Tom> mechanism 'in the wild', and at least one expired I-D
    Tom> documenting them.  They can presumably be revived as needed.

Please don't; use Keith's GSSAPI mechanism.  I believe that getting
his draft in shape should not take too much time at all.