Meeting the InCommon Assurance profile criteria using Active Directory

[David Walker <>]

I went through the relevant IAP sections to determine which need an Alternative means statement for NTLMv2 and Kerberos with RC4-HMAC.  What I came up with is that none do.  See:

>     https://spaces.internet2.edu/x/hAlOAg

for a discussion and the warnings we agreed to provide about the use of those protocols.

Please look this over carefully and shoot me down; I'm probably suffering from late-Friday-afternoon muddled thinking.

David