Macintosh Safari Browser and IIS with Kerberos

Sam Hartman hartmans at MIT.EDU
Fri Dec 5 12:41:32 EST 2003


>>>>> "Tim" == Tim Alsop <Tim.Alsop at CyberSafe.Ltd.UK> writes:

    Tim>    Sam,

    Tim>    Surely one view to take on this is :

    Tim>    Apple have taken a decision to implement the IETF draft
    Tim> protocol that Microsoft use in IE and IIS. They have done
    Tim> this, but not correctly.  If they are going to implement an
    Tim> IETF draft they should make their browser work the same way
    Tim> that IE works so that IIS cannot tell the difference ???

This  is  wrong on so many levels, including:

* The protocol is an individual submission, not an IETF draft.  It has
  not been subjected to IETf review, and the review it has received is
  rather negative.


* The draft does not mandate any particular policy for when
  credentials are delegated.




More information about the Kerberos mailing list