PKU2U Public Key based User to User authentication protocol for peer-to-peer systems Use PKINIT/RFC4556 and RFC4120 messages Replace the KDC with the application server All traffic tunneled using GSS-API messages Use RFC4121 for all GSS-API primitives |