>>>>> "Josh" == Josh Howlett <[log in to unmask]> writes:
>>
>> I don't think we get enough information to do real channel
>> bindings from the browser.
Josh> Oh, I thought the browser plugin yielded complete GSS
Josh> tokens. Presumably you're missing something else to allow you
Josh> to complete the comparison?
Yeah.
I don't think we get enough for unique channel bindings from
xmlHttpRequest.
We might possibly be able to do endpoint CB.
Either should be possible on the server.
|