[TLS] Re: the use cases for GSS-based TLS and the plea for integrating

[Simon Josefsson <simon at josefsson.org>]

Chris Newman <Chris.Newman at Sun.COM> writes:

> sufficient that it might deploy.  Specifically, is this likely to be
> implemented in multiple TLS stacks?  Are applications that consume TLS

I believe GSS-API support in TLS, either directly, or through some
generic external-authentication-protocol (which may use channel bindings
to bind the external authentication to the TLS stream) is a good idea.
We all know RFC 2712 is broken. GSSAPI-in-TLS seems like a simple way
fix both RFC 2712 and enable other useful things.

I've been planning to implement Kerberos/GSS-API support in GnuTLS, but
until there is consensus around a specific protocol I can't start.

I think it would be useful if those who are opposed to the past, and
current, GSSAPI-in-TLS proposals describe how they like GSS-API to be
implemented in TLS rather than criticizing the proposals.
Alternatively, if they see any other non-GSS-API way to integrate
Kerberos into TLS, as that appear to be the main use-case for
GSSAPI-in-TLS.

/Simon

_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls