[42594] in Cypherpunks
Re: Keyed-MD5, ITAR, and HTTP-NG
daemon@ATHENA.MIT.EDU (Rich Salz)
Tue Oct 31 15:35:49 1995
From: Rich Salz <rsalz@osf.org>
Date: Tue, 31 Oct 1995 15:13:48 -0500
To: Mike_Spreitzer.PARC@xerox.com, hallam@w3.org
Cc: cypherpunks@toad.com
> Isn't this what the GSS-API is about? Couldn't HTTP-NG just convey GSS
> "tokens", and do something about getting both sides to agree on which GSS
> "mechanism" is to be used, and on what Principals are involved?
Yes, exactly. Of course negotiation and naming are often the harder
issues. It is a pity that HTTP-NG seems to be inventing protocol-specific
crypto-systems, rather then designing a general one and then being its
first customer.
/r$
