Re: RFR 6722928: Support SSPI as a native GSS-API provider

2019-05-27 Thread Michael Osipov
I will have a look at the outstanding emails today. Am 2019-05-28 um 02:55 schrieb Weijun Wang: Hi Everyone, Do you have any new comments? My major concern now is the canonicalization of service/host.dev.example.com to service/host.example@dev.example.com now. As Michael pointed out, it c

Re: RFR 6722928: Support SSPI as a native GSS-API provider

2019-05-27 Thread Weijun Wang
> On May 28, 2019, at 8:55 AM, Weijun Wang wrote: > > Hi Everyone, > > Do you have any new comments? > > My major concern now is the canonicalization of service/host.dev.example.com > to service/host.example@dev.example.com now. As Michael pointed out, it > could well be service/host.e

Re: RFR 6722928: Support SSPI as a native GSS-API provider

2019-05-27 Thread Weijun Wang
Hi Everyone, Do you have any new comments? My major concern now is the canonicalization of service/host.dev.example.com to service/host.example@dev.example.com now. As Michael pointed out, it could well be service/host.example@example.com. My suggestion now is to strip the realm part w

Re: RFR 8223482: Unsupported ciphersuites may be offered by a TLS client

2019-05-27 Thread Martin Balao
Hi Xuelei, Thanks to you for raising these concerns and providing your feedback. On 5/24/19 7:47 PM, Xuelei Fan wrote: > Good, I have no further comment for this update.  Please go ahead. > > I think there is a possible improvement by calling > Cipher.getInstance(algorithm) only one time for eac