Re: [TLS] the use cases for GSS-based TLS and the plea for

[Nicolas Williams <Nicolas.Williams at sun.com>]

Martin, I definitely agree about islands of trust.

If servers/acceptors/responders should be able to have credentials for
multiple islands of trust[*] then we need to have them tell the
client/initiator what "islands"[*] of authentication, and what
mechanisms, they have credentials for.

It may be too late to work federation negotiation into SPNEGO, but it
makes plenty of sense to me that application protocols should handle
federation and mechanism negotiation rather than pseudo-mechanisms.

Here's our chance to get that right for TLS.

*  "worlds" or "federations" or whatever we should call it; in the
   Liberty, OpenID and other such communities the term used is
   'federation;, so I propose we use that.

Nico
-- 

_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls