On Thursday, September 04, 2003 16:58:09 -0700 Nicolas Williams <Nicolas.Williams%sun.com@localhost> wrote:
On Thu, Sep 04, 2003 at 04:29:47PM -0600, Joseph Galbraith wrote:All right-- so the big question is-- have we reached consensus for reals this time?What's the consensus? That gssapi and external-keyex userauth are to be deprecated and replaced with forms that correctly bind the context to the session?
Yes. Particularly: - Obsolete external-keyex; it should not be used. - Replace 'gssapi' with 'gssapi-with-mic'- Add 'gssapi-keyex' to send a MIC using the context established during key exchange.
I will send some text for the latter two sometime tomorrow morning. -- Jeff