[TLS] RE: Review of draft-santesson-tls-gssapi-00

[<Pasi.Eronen at nokia.com>]

Simon Josefsson wrote:
> > Here's one sketch of how this could work:
> >
> >    ClientHello
> >    (ciphersuite TLS_RSA_GSSAPI_WITH_AES128_CBC_SHA, 
> >    gss_api extension with OID list)
> 
> I like this approach better, although I don't understand why you need
> special GSSAPI ciphersuites, could you explain?  Wouldn't it be
> possible to do this with an extension, to enable the extra roundtrips,
> without touching the ciphersuites?

I'm not sure if we really need special GSSAPI ciphersuites either...
But at least it would allow the client to say "I want to do
RSA+GSS-API, not plain RSA" in a way that would be correctly
understood by existing servers (that don't do GSS-API).

> Using gss_wrap to wrap additional information, such as channel
> bindings, has some similarities with the SASL GS2 mechanism.  Note
> that it doesn't seem to work with authentication-only GSS-API
> mechanisms that doesn't support GSS_Wrap.

Hmm... possibly it should be GSS_GetMIC instead of GSS_Wrap?
Are there any important GSS-API mechanisms that support neither?

Best regards,
Pasi

_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls