Re: [saag] SSH Protocol Extensions

[Nico Williams <[e-mail]>]

On Wed, Aug 12, 2015 at 04:22:14PM +0000, Viktor Dukhovni wrote:
> On Wed, Aug 12, 2015 at 05:13:02PM +0100, Phil Lello wrote:
> 
> > Admittedly, I'm currently put off by
> > what appears to be a steep learning curve once GSS, RADIUS, et al. come
> > into the mix, but with my 'lazy coder' hat on, it doesn't seem unreasonable
> > that other potential implementers will feel the same.
> 
> Is this confusing implementation with deployment?

I don't see a mention of deployment.  I suspect that Phil wants to
implement from scratch, not use an off-the-shelf implementation.

> Once the platform's GSSAPI library supports ABFAB, it becomes a
> question of deployment, not implementation.

I should note that one should be able to implement and deploy an SSH
client and server that use a system GSS library for some GSS mechanisms,
and a non-system GSS mechanism used directly without reference to any
GSS libraries.  Some SASL and SMB implementations do this sort of thing.

Nico
--