> -----Original Message-----
> From: Sam Hartman [mailto:[email protected]]
> Sent: Thursday, April 21, 2011 5:31 PM
> To: Jim Schaad
> Cc: [email protected]
> Subject: Re: [abfab] Message Integrity for gss-eap
> 
> >>>>> "Jim" == Jim Schaad <[email protected]> writes:
> 
> 
>     Jim> Some type of extension that allows for validation of external
>     Jim> negotiation (i.e. what I send to the RP before setting up the
>     Jim> gss-eap session)?
> 
> You can fold that into channel bindings if you like.
> If you want something more than channel bindings I'm not aware of anything
> that GSS-API gives you.
> 
> I think there are a lot of reasons we should not support things that GSS
> cannot do in our GSS mechanism

I was not sure if this would be the type of thing that you wanted to put in
as an extension or not.

Jim

.

_______________________________________________
abfab mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/abfab

Reply via email to