Re: [TLS] the use cases for GSS-based TLS and the plea for

[Nicolas Williams <Nicolas.Williams at sun.com>]

On Fri, Jul 20, 2007 at 07:40:34PM +0200, Martin Rex wrote:
> What I meant (and forgot to add) was "certificate-based credential
> (self-signed when no PKI is used) as a mandatory to implement
> feature for interoperability".
> 
> If support of cert-based credentials is a mere MAY, then I am sure
> there will be servers/services where installing or using a PKI
> credential is impossible/defective/unusable, and you cannot complain
> to the vendor because not-supporting it is fully compliant with the spec.

I don't think this spec aims to change TLS 1.1 to make any current
cipher suites that are REQUIRED to implement no longer REQUIRED to
implement.  Nor would I support that, for interop reasons, of course.

Nico
-- 

_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls