The API for org.ietf.jgss must be the same as that in RFC 2853, however, textual descriptions can be modified. Some additional documentation needs to be done in the area of acquiring credentials from the Subject, security exceptions, non-default lifetimes, and the like.

The current API has the following diversion from the RFC and should be fixed:

MessageProp is missing a constructor public MessageProp(boolean privState)
MessageProp overrides Object.toString()