export list symbols

[Simon Wilkinson]

>
> Think of TELNET and AFS, which, I know are not exactly good examples
> here (in large part because they pre-date RFC3961), but they are good
> examples of apps which, if they really had to avoid KRB-SAFE/PRIV or  
> the
> GSS-API (e.g., because of per-token/message overhead), then really
> should have used _a_ cryptographic protocol framework, of which  
> RFC3961
> is a reasonable example.
>
> IMO Kerberos implementors SHOULD export RFC3961 interfaces.

Just as a data point, the AFS community is currently considering a new  
security layer, rxgk, which makes use of RFC3961 for all of its bulk  
crypto needs. The more 3961 implementations available to choose  
between, the better!

Cheers,

Simon.