PROXY tickets and GSSAPI

[Sam Hartman]

>>>>> "Douglas" == Douglas E Engert <deengert at anl.gov> writes:


    Douglas> The problem is the GSSPAI only has a single delegte flag,
    Douglas> which is used for delegting a TGT. which is also
    Douglas> forwardable.

    Douglas> The GSSAPi extensions we are proposing at the GGF next
    Douglas> month might address this problem, by allowing more input
    Douglas> to the GSS delegtion process, including delegation at any
    Douglas> time.

Doug, why are you proposing GSSAPI extensions outside of the IETf
context?  It annoys a lot of people, makes it harder to write
interoperable software, and reduces the quality of the final spces.