Path: utzoo!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!usc!snorkelwacker!bloom-beacon!jon From: jon@athena.mit.edu (Jon A. Rochlis) Newsgroups: comp.protocols.iso Subject: Re: New ISO Authentication ASE Message-ID: <1990Mar6.025707.14406@athena.mit.edu> Date: 6 Mar 90 02:57:07 GMT References: <9002261922.AA00211@polka.mitre.org> <1990Mar5.154434.21726@geac.com> Sender: news@athena.mit.edu (News system) Reply-To: jon@athena.mit.edu (Jon A. Rochlis) Organization: Massachusetts Institute of Technology Lines: 8 There are some very good reasons for wanting to be able to use Kerberos. The issue is not one of "not invented here" at all. Some of the issues only effect the US (like having to pay royalties for the use of public key technology), and others are not addressed well at all by the ISO standards (revocation, for example). There is also the trivial point that Kerberos has been shown to work in production use for several years. It works.