kerberos/http+spnego through http proxy server?

Sam Hartman hartmans at MIT.EDU
Mon Dec 1 08:30:30 EST 2003


>>>>> "Sanjay" == Sanjay Sane <sanjays at cisco.com> writes:

    Sanjay> My questions: a. Above draft mentions "This mechanism is
    Sanjay> not used for HTTP authentication to HTTP proxies". Why
    Sanjay> not? Is this because its not currently implemented in IE,
    Sanjay> or its some kind of a policy decision not to? Any
No, more like a protocol bug that doesn't support the HTTP proxy
authentication model.  See traffic about this draft on the
ietf-krb-wg at anl.gov mailing list and traffic about the HTTP SASL draft
on ietf-sasl at imc.org for detailed complaints from the HTTP community.
Google should help you find archives of those lists.



More information about the Kerberos mailing list