Re: [kitten] [nfsv4] draft-ietf-nfsv4-rpcsec-gssv3: request for review

[Nico Williams <[e-mail]>]

On Sun, Aug 03, 2014 at 01:50:44AM -0400, Benjamin Kaduk wrote:
> On Fri, 1 Aug 2014, Nico Williams wrote:
> 
> I think we're actually in agreement on what's going on here, just
> using different words to describe it.

OK.

> >>> That stops
> >>>replay attacks.  We need only bind things sufficiently to the new
> >>>RPCSEC_GSS security context handle and the client credentials.
> >>
> >>An evil user that can get root on a client machine wouldn’t need to
> >>[...]
> >
> >Stop right there!  We *always* assume local security when dealing with
> >security protocols :)  There's no need to state this assumption.  It's
> 
> Indeed, this is not the point I was trying to make.  More under
> separate cover.

I was responding to Andy :)