>>>>> "Nicolas" == Nicolas Williams <[EMAIL PROTECTED]> writes:

    >> But my personal preference is to enhance channel bindings for
    >> cryptographic keys until they can (and are) portably used in
    >> GSSAPI V3


    Nicolas> With IPsec we won't use cryptographic keys, after all.
    Nicolas> We'll use the IPsec initiator and responder IDs bound to
    Nicolas> the channel.

I remain very concerned about this proposal but we'll discuss after
you have text.

What I meant was that I see channel bindings being used in the future
to bind to cryptographic channels, not to bind to network addresses.

-++**==--++**==--++**==--++**==--++**==--++**==--++**==
This message was posted through the Stanford campus mailing list
server.  If you wish to unsubscribe from this mailing list, send the
message body of "unsubscribe ietf-cat-wg" to [EMAIL PROTECTED]

Reply via email to