On Tue, Aug 12, 2014 at 04:22:21PM -0400, Salz, Rich wrote:
> Can you take a look at http://rt.openssl.org/Ticket/Display.html?id=549
> And let us know what you think?
I contribute bits of code to MIT and Heimdal Kerberos and maintain
a Kerberos infrastructure for a living. I would like to see OpenSSL
remove all support for the obsolete Kerberos-V5 cipher-suites.
The modern way to combine Kerberos with TLS is GSSAPI with channel
binding. The old crufty Kerberos support should be deleted from
"master". No new features should be added to this code.
--
Viktor.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [email protected]
Automated List Manager [email protected]
