The evolution of Windows authentication

I have a list of bug fixes and minor improvements around KDC proxying in the Windows Kerberos client, but also the Microsoft RDP client that would go a long way to make KDC proxying a suitable option to provide a KDC line-of-sight alongside the IAKerb effort. I don't see them as mutually exclusive, especially since KDC proxying is already supported in many non-Windows Kerberos client stacks, while IAKerb isn't. This is more of an open offer than a question, since you've asked for feedback, I would really like to point you in the right direction for a few quick wins there.