On Friday 20 March 2009 13:14, Morris Riedel wrote:

Hi,

...

- My personal thinking is, since we are talking about PGI or interoperability, we probably do need to change the current implementation if it can not satisfy interoperability, while keeping the principle that the change should be as little as possible.

In terms of little changes I agree - but I consider PGI_TLS / PGI_GSI as massive changes.

For instance, we have developed a UNICORE Gateway (for AuthN) that works with PGI_TLS naturally - and PGI_GSI more recently providing of course not FULL delegation support per hop, but proxies are supported on GSI-TLS level.

I'm lost. What do mean by PGI_GSI technically? Is there any document which defines it? How is it related to delegation? A.K.