Russ Allbery rra at
Fri Jul 18 13:02:02 EDT 2008

Michael Ströder <michael at> writes:

> Is the TGT sent by the browser in the SPNEGO blob? Up to now I thought 
> it's just a service ticket.

It's optional.  The browser can choose to delegate credentials or not,
based on local configuration.  (In Firefox, for example, it's two separate
configuration options.)

Russ Allbery (rra at             <>

More information about the Kerberos mailing list