IETF-SSH archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Pending OpenSSH release: contains Kerberos/GSSAPI changes

To: Jeffrey Hutzelman <jhutz%cmu.edu@localhost>
Subject: Re: Pending OpenSSH release: contains Kerberos/GSSAPI changes
From: Sam Hartman <hartmans%mit.edu@localhost>
Date: Sat, 31 Jan 2004 12:12:53 -0500

I'd prefer client MAY mutual auth rather than client SHOULD NOT mutual
auth.

If the server does not implement gss-keyex then a sufficiently clever
client can get some of the benefits of gss-keyex in some situations by
requesting mutual.

References:
- RE: Pending OpenSSH release: contains Kerberos/GSSAPI changes
  - From: Wachdorf, Daniel R
- RE: Pending OpenSSH release: contains Kerberos/GSSAPI changes
  - From: Jeffrey Hutzelman
- Re: Pending OpenSSH release: contains Kerberos/GSSAPI changes
  - From: Nicolas Williams

Prev by Date: RE: Pending OpenSSH release: contains Kerberos/GSSAPI changes
Next by Date: Re: Russ Housley: IESG comments on draft-ietf-secsh-auth-kbdinteract-05.txt
Previous by Thread: Re: Pending OpenSSH release: contains Kerberos/GSSAPI changes
Next by Thread: RE: Pending OpenSSH release: contains Kerberos/GSSAPI changes
Indexes:

Home | Main Index | Thread Index | Old Index