Re: [TLS] the use cases for GSS-based TLS and the plea for integrating

[Chris Newman <Chris.Newman at Sun.COM>]

Jeffrey Altman wrote on 7/26/07 17:55 -0400:
> Chris Newman wrote:
> > I will certainly do that.  However, I recommend you talk to
> > application developers who consume TLS and GSSAPI/SSPI/SASL/EAP APIs
> > to see how they feel about these issues.
> Chris:
>
> If I am reading you correctly, you would like to see proposals for
> example describing how the Windows SSPI and OpenSSL among other TLS
> implementations would need to be modified to support the described
> functionality.  I think that this is a very important consideration and
> I would be happy to propose changes for OpenSSL as I was involved in
> adding the support for TLS KRB5 to OpenSSL many years ago.

Yes.  And it's not just changes to the TLS stacks, but also to the applications 
that consume the TLS stacks.

I also encourage serious consideration of alternate approaches that involve 
fewer changes to the TLS stack.

               - Chris


_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls