Re: KITTEN: IETF 75 - 76

[Nicolas Williams <Nicolas.Williams at sun.com>]

On Thu, Aug 20, 2009 at 12:11:05AM +0200, Martin Rex wrote:
> IMHO -- if the functionality is needed, it can be, and should be
> built at the application level entirely -- and it will work
> just fine with all existing gssapi mechanisms.

I agree.  No one is actually proposing to add re-keying to the GSS-API,
so let's not bother.

One might argue that with sundry extensions the GSS-API would be a
useful API for using TLS, much as with the SSPI, therefore we should add
support for re-keying and other TLS-isms.  No one is proposing that
either, but if some one did propose it and intended to implement, then
I'd probably support such a proposal.