Re: [SPKM] Interoperability

>>>>> "Martin" == Martin Rex <martin.rex@sap.com> writes:

    Martin> Nicolas Williams wrote:
    >> 
    >> On Tue, Oct 31, 2006 at 02:23:50PM -0500, Sam Hartman wrote:
    >> > * When will we get a spec out?  How long will the market
    >> wait?  > Sometimes, you have to accept that the market will
    >> deploy something > and you have little influence on it.  In
    >> those cases it's better to > write a compelling spec and hope
    >> that people will migrate.  Other > times, if you can stretch to
    >> meet market timing, you can avoid the > market deploying
    >> something that does not meet your spec.  That is > very
    >> desirable.
    >> 
    >> If we cannot get a spec that will meet our needs in time for
    >> the market then the proposed protocol could go to Informational
    >> and a spec that does meet our needs can later go to
    >> Proposed-Standard, using a different OID.

    Martin> There is a problem in the traditional (simple) GSS-API and
    Martin> how it is embedded within several application protocols,
    Martin> that there is no negotiation of a mechanism (OID).  In
    Martin> real distributed environments, where a component is both,
    Martin> server and client, a switch to a new OID might require a
    Martin> "flag day".  

This BOF at least is has a primary goal of trying to solve the problem
for NFS which does have a negotiation mechanism.

We, implementeres are also trying to make SPNEGO much more widely
available.

However you are completely correct that upgrading a specific
deployment can be difficult in the absence of negotiation.  I'm not
sure what to do about this problem other than acknowledge it and
encourage use of negotiation.

_______________________________________________
SPKM mailing list
SPKM@ietf.org
https://www1.ietf.org/mailman/listinfo/spkm