"best" enctype?

[Luke Howard]

On 15/08/2011, at 7:54 PM, Chris Hecker wrote:

> Well, I'm setting the profile in code, so I'll have to patch anyway, but 
> I'll do the krb5_get_permitted_enctypes() thing, I had a todo to try to 
> figure out how to get the default out of the context/profile, so at 
> least it's only hard coded in one place now.  :)

I've always tried to make stuff as enctype- (or anything-) agnostic as possible. It always pains me when a protocol is ostensibly extensible but implementations, applications, etc, make assumptions to negate that.

-- Luke