replacing MIT's ASN.1 code

[John Hascall]

> The best rationale for shipping support for both is that you can more
> easily do interop testing (not only initially but as bugs are fixed).
> But I'm not sure that holds up.  In which case the best path is to just
> switch -- eventually you'll want to, it's just a matter of time :)

If MIT-KRB suddenly started shipping with just a2c-gen'd ASN.1 code
I think that would just assure that more risk-adverse sites (like us,
for example) would just freeze on our current version until some
other poor smucks got to prove/disprove the safety of the new stuff.


John