> Factotum (Russ may correct me) is modelled on SSH's agent. The SASL > type functionality resides in the servers that use factotum, so I'd > say the differences are quite significant. > > There is a paper on Plan 9 security that makes very interesting > reading.
do you have a reference for this claim? factotum both caches keys and certs (as does ssh-agent), as well as functions as a delegation agent (as i understand sasl does -- haven't used it). so it's basically just the union of roles. - erik