[TLS] the use cases for GSS-based TLS and the plea for integrating Kerberos with TLS: draft-santesson-tls-gssapi

[Larry Zhu <lzhu at windows.microsoft.com>]

As we know -02 was published and it integrates Kerberos-alike GSS
mechanisms with TLS by importing the GSS key as PSK. It does so to
minimize the impact to the TLS state machine.


http://www.ietf.org/internet-drafts/draft-santesson-tls-gssapi-02.txt


EKR requested us to nail down the use cases for this protocol and
explain the rational for the integration.

In response, the ID revision -03 contains the use cases and why we want
to integrate Kerberos with TLS, particularly in the introduction
section.

http://www.secure-endpoints.com/tls-gss/draft-santesson-tls-gssapi-03.tx
t

The flowing document based on email posted by Larry Zhu describes
additional background information for the protocol design.

http://www.secure-endpoints.com/tls-gss/fka-tls.txt

thanks,

--larry



_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls