gs2 and qop

[Sam Hartman <hartmans-ietf@xxxxxxx>]

>>>>> "Simon" == Simon Josefsson <jas@xxxxxxxxxxx> writes:

    Simon> Sam Hartman <hartmans-ietf@xxxxxxx> writes:
    >> So, this is a bit complicated and perhaps the best thing is to
    >> decide that we just don't care about mechansims without
    >> integ_avail.

    Simon> For GS2, there is a downgrade attack of the quality of
    Simon> protection (at the SASL level) if the GSS-API mechanism
    Simon> doesn't provide integrity of GSS_Wrap tokens.  In general,
    Simon> that's probably not acceptable.


I clearly have not been paying enough attention to gs2.


Are you talking about gss-api level qop or sasl security layers?

Why do you negotiate qop?
Is that safe to do?
I thought qop values were implementation local.