Re: RE: Proxy authentication with Negotiate uses wrong host

2011-08-25 Thread 1983-01-06
> On Wed, 2011-08-24 at 07:42 -0400, 1983-01...@gmx.net wrote: > > Are you refering to sole Kerberos or are you just concerned about > > transport encryption? Your statement somewhat irritates me. > > Given that the HTTP traffic cannot be securely wrapped into the GSS > > content and nor the SASL Q

Re: RE: Proxy authentication with Negotiate uses wrong host

2011-08-25 Thread Greg Hudson
On Wed, 2011-08-24 at 07:42 -0400, 1983-01...@gmx.net wrote: > Are you refering to sole Kerberos or are you just concerned about > transport encryption? Your statement somewhat irritates me. > Given that the HTTP traffic cannot be securely wrapped into the GSS > content and nor the SASL QOP can be

Re: RE: Proxy authentication with Negotiate uses wrong host

2011-08-24 Thread 1983-01-06
> Betreff: RE: Proxy authentication with Negotiate uses wrong host > On Wed, 2011-08-24 at 05:52 -0400, Bert Huijben wrote: > > Then somebody added Kerberos support to neon, but the api wasn't > > updated to allow different behavior for the specific implementations.

Re: RE: Proxy authentication with Negotiate uses wrong host

2011-08-24 Thread 1983-01-06
Bert, > > -Original Message- > > From: 1983-01...@gmx.net [mailto:1983-01...@gmx.net] > > Sent: woensdag 24 augustus 2011 10:47 > > To: us...@subversion.apache.org > > Subject: Re: Proxy authentication with Negotiate uses wrong host > > > >

RE: Proxy authentication with Negotiate uses wrong host

2011-08-24 Thread Greg Hudson
On Wed, 2011-08-24 at 05:52 -0400, Bert Huijben wrote: > Then somebody added Kerberos support to neon, but the api wasn't > updated to allow different behavior for the specific implementations. Kerberos via HTTP negotiate is also insecure when not used over HTTPS. In HTTP negotiate, the GSSAPI mec

RE: Proxy authentication with Negotiate uses wrong host

2011-08-24 Thread Bert Huijben
> -Original Message- > From: 1983-01...@gmx.net [mailto:1983-01...@gmx.net] > Sent: woensdag 24 augustus 2011 10:47 > To: us...@subversion.apache.org > Subject: Re: Proxy authentication with Negotiate uses wrong host > > > On Wed, Aug 24, 2011 at 09:25:49AM +