Subject: Re: [abfab] gss-eap: empty channel bindings

From: Sam Hartman <[email-masked]>
Date: Thu, 24 May 2012 04:33:16 -0400

>>>>> "Sam" == Sam Hartman <[email-masked]> writes:

    Sam> After reading Luke's mail and Ken's mail my preference is to
    Sam> chang ethe draft to do what the Moonshot code does.  In
    Sam> particular I propose that the channel binding code is critical
    Sam> but not required.  It MUSt be sent when non-empty application
    Sam> channel bindings are passed in and MUST NOT be sent when empty
    Sam> application channel bindings are passed into
    Sam> gss_init_sec_context.

The chairs informed me that WG discussion supports this conclusion, so
draft 07 will reflect the above change.