3 ms·
cryptonector and I also specified a Kerberos-like protocol [1] based on Mozilla’s defunct BrowserID protocol. I demonstrated it as a drop-in replacement for Ker
by lukeh 3y ago
cryptonector and I also specified a Kerberos-like protocol [1] based on Mozilla’s defunct BrowserID protocol. I demonstrated it as a drop-in replacement for Kerberos with Exchange, having built a Windows SSP and credential provider as well as a GSS-API implementation (the latter which is open source [3]).
Unfortunately after Mozilla cancelled Persona, this never went anywhere.
[1] https://datatracker.ietf.org/doc/html/draft-howard-gss-browserid-07 https://datatracker.ietf.org/doc/html/draft-howard-gss-brows...
[2] https://hacks.mozilla.org/2013/04/mozilla-persona-for-the-non-web/ https://hacks.mozilla.org/2013/04/mozilla-persona-for-the-no...
[3] https://github.com/PADL/libbrowserid https://github.com/PADL/libbrowserid
- markc 3y agoVery cool. Back in ancient times, shortly after Kerberos for GSS-API came out I was tasked with achieving interoperability between Hewlett-Packard's GSS-API implementation (based on MIT's) with popular commercial ones (Cygnus? Microsoft?). It was my introduction to subtle art debugging crypto protocols, handy when SSL came along. Implementing to the spec doesn't necessarily mean they'll interoperate. This brings back some memories: https://web.mit.edu/kerberos/krb5-devel/doc/appdev/gssapi.html https://web.mit.edu/kerberos/krb5-devel/doc/appdev/gssapi.ht...