RE: [Fed-Talk] PKINIT and Kerberos
RE: [Fed-Talk] PKINIT and Kerberos
- Subject: RE: [Fed-Talk] PKINIT and Kerberos
- From: "Nebergall, Christopher" <email@hidden>
- Date: Tue, 15 Nov 2005 16:05:39 -0700
- Thread-topic: [Fed-Talk] PKINIT and Kerberos
>Part of the problem here is one of interoperability. Microsoft is the
only company using PKINIT, and MS is built
>on draft *9*. There are, shall we say, *lots* of changes between draft
9 and draft 29, not the least of which is MS is
>using *completely different PA_PK_AS_REQ/REP type values*.
>IIRC the MIT Kerberos team is on record as saying they're not going to
accept changes based on draft 9, and without
>interoperability the whole thing is moot. MS can step up to the plate
here, but it shouldn't surpise anyone to
>know that they have expressed a distinct lack of interest.
If you look at the latest draft you will see that Microsoft is one of
the authors. So all hope isn't lost ;-)
-Christopher
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden