Re: alternative to user-to-user Kerberos in KINK

[Derek Atkins <warlord@xxxxxxx>]

Well, clearly we disagree. :)

We'll see what the group at large thinks.

-derek

Bill Sommerfeld <sommerfeld@xxxxxxxxxxxx> writes:

> > It works for road-warrior VPNs :)
> 
> that's nice.
> 
> > In other cases, you probably aren't authenticating users to users, or
> > hosts to users, but rather hosts to hosts.  
> 
> This is an unwarranted assumption, and the ipsec implementation i'm
> working on doesn't make that assumption.
> 
> > So I don't think it matters there, either.  
> 
> I think it does.
> 
> 					- Bill

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/      PP-ASEL      N1NWH
       warlord@xxxxxxx                        PGP key available