On Tue, 2015-05-05 at 09:21 +0100, Matt Caswell wrote: > I am considering removing Kerberos support from OpenSSL 1.1.0. There > are > a number of problems with the functionality as it stands, and it > seems > to me to be a very rarely used feature. I'm interested in hearing any > opinions on this (either for or against). > > Thanks in advance for your input, There have been some conversations behind Red Hat doors about improving the state of Kerberos/TLS in both standards and implementations. Could we maybe have a broader conversation about how to fix this situation? Nathaniel