On Tue, Sep 25, 2007 at 05:20:28PM +0200, Steffen DETTMER wrote:

> > GSSAPI uses Keberos-5 KDCs for key management.
> 
> Ahh, you mean creating a new TLS (version) standard/RFC, that is
> using GSSAPI and is to be used e.g. inside large organizations
> that already have some GSSAPI available (because they use
> Kerberos) to eliminate the need to additionally worry about
> keys/certificates for this new TLS (but using Kerberos protocol /
> authentication instead)?

Approximately correct, not a new TLS standard, the existing TLS 1.1 is
likely sufficient, rather a new standard cipher-suite for TLS 1.1.

-- 
        Viktor.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to