Re: [TLS] Re: Review of draft-santesson-tls-gssapi-00

[Jeffrey Altman <jaltman at secure-endpoints.com>]

Simon Josefsson wrote:
> I'm not convinced of that.  It is useful for TLS library APIs to be
> consistent with the TLS protocol.  Your proposal was to add the
> GSS-API negotiation after the TLS handshake.
I believe that by negotiating TLS_XXX_GSS_YYY it is implicit that the
TLS library
API must not return until after the GSS handshake has completed. 
Otherwise, what
is the point of adding the new cipher suite designator?

Jeffrey Altman

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls