>>>>> "Balazs" == Balazs Scheidler <[EMAIL PROTECTED]> writes:

    Balazs> Although not strictly related to this discussion, but TLS
    Balazs> does support kerberos based authentication, see RFC 2712


I just knew someone was going to bring that up.

I really need to right draft-hartmans-tls-2712-historic.  Briefly, the
major Kerberos implementations do not provide APIs necessary to
implement RFC 2712, the spec provides insufficient detail to be
implemented, the Kerberos vendors believe that providing the APIs
would be a bad idea from an abstraction standpoint, RFC 2712 only
supports DES, and RFC 2712 fails to use Kerberos in a manner that is
compatible with ongoing work in the Kerberos working group.



--Sam

_______________________________________________
Syslog mailing list
[email protected]
https://www1.ietf.org/mailman/listinfo/syslog

Reply via email to