Re: Comments on draft-ietf-secsh-x509-00

[Darren J Moffat <Darren.Moffat%Sun.COM@localhost>]

Given that the SSH protocol already has support for GSSAPI and
there are GSSAPI mechanisms that can use X.509 certs, is there
really any need for this other than to cause more complications ?

This might be particularly important on the client side since
a user may be able to use their key and cert via a GSSAPI mechanism
already.

--
Darren J Moffat