SPNEGO/negotiate-auth and delegation in Safari

Hi all,

I see that SPNEGO/negotiate-auth works out of the box for Safari. This is great, but there are a couple of additions which would really help in an enterprise environment.

Firstly, the ability to turn on delegation, so that servers can provide more powerful functionality, e.g. here's the apache/modauthkerb directive it would work with:

http://modauthkerb.sourceforge.net/configure.html#saving

Also, some control over the service principal that it uses would be very useful - i.e. so you can force it to use the canonical host name.

I'd be grateful if anyone could comment on how likely or otherwise developments on these topics would be, or even if other interested people could note their interest.

As an example - we have cosign ( http://cosign.sourceforge.net/) single sign-on working with Chrome and Firefox via spnego. It would be great to be able to add Safari to this list too.

Cheers
Toby