On Wed, Apr 3, 2013 at 4:07 PM, Nico Williams <nico@xxxxxxxxxxxxxxxx> wrote: > Oh, well, this is just outdated text. And indeed, the GSS-API's > notion of "qop" (quality of protection) is broken: it's used in the > wrong place (per-msg token functions). The GSS qop brokenness is why > this text persists. > > OLD: ... > NEW: ... Actually, I should also propose some text explaining why qop is a busted concept and what qop 0 means ("default"). Nico --