MS's implementation of SPNEGO ...

[Luke Howard]

>The mechListMIC is an optional field. In the case that the chosen 
>mechanism supports integrity, the initiator may optionally include a 
>mechListMIC which is the result of a GetMIC of the MechTypes in the 
>initial NegTokenInit and return GSS_S_COMPLETE. 

I haven't seen Microsoft's implementation include this field,
though, except on the NegTokenTarg in which case it includes a 
copy of the responseToken.

-- Luke

--
Luke Howard | PADL Software Pty Ltd | www.padl.com