IETF-SSH archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: gss userauth

On Tue, Aug 26, 2003 at 09:34:07PM -0700, Nicolas Williams wrote:
> suffice.  We have other userauths that also don't bind authentication to
> the session ID (password, keyboard-interactive), so gss userauth's

so both are weak forms of authentication.

> failure to bind authentication to the session ID is acceptable,

so gss userauth should be weak as well?
Home | Main Index | Thread Index | Old Index