a note about PKINIT and PKCROSS

[Brian Tung <brian at isi.edu>]

In a pair of forthcoming notes, I will post PKINIT and PKCROSS.  Here
are some short notes concerning these drafts (neither of which have
changed much).

PKINIT: The principal technical change has been the modification of
the Signature data structure to align itself more closely with PKCS-1.
There is a new Security Considerations section, at the behest of
Denis.  There are some other minor textual changes.

PKCROSS: There are no technical changes.  A comment about KDC-to-KDC
communications has been added.  The authors feel that there is a
trade-off between having the KDC-to-KDC exchange and thereby buying
a guarantee, so to speak, that the remote KDC will accept the ticket,
and not having that exchange and possibly having tickets rejected
after being issued.  We choose the former so that the operation from
the client's perspective is unchanged.

b