gss userauth (fwd)

[Steven Michaud]

On Sun, 24 Aug 2003, Steven Michaud wrote:

> Finally, despite what Love says, the gssapi protocol as used by gss
> userauth already does provide mutual authentication between the
> client and the server.

Alas, I need to take back this statement.

See the ongoing discussion on the ietf-ssh mailing list
(ietf-ssh at netbsd.org, archives at
ftp://ftp.ietf.org/ietf-mail-archive/secsh/), particularly Sam
Hartman's message of 3:22 EST, 8-26-2003.