GSSAPI encryption support

Hi Team,

Postgres 12 added "GSSAPI encryption support" as an additional feature to
"GSSAPI Authentication" mechanism introduced in Postgres 11. I have few
questions based on it.

1) The encryption support means that the encryption between the Client and
the Server over the network, which was previously possible only through SSL
or previously, not encrypted at all. Now, instead of SSL, we can change
pg_hba.conf with the parameters "hostgssenc" and hostnogssenc" to support
encryption over the network directly using gssapi.

2) We need to have a client server, a service server and a Key Distribution
Center Server which should have Kerberose installed in it. Kerberose is
available as opensource.

Please help me if my understanding is correct and let me know about the
major improvement on this feature with PG12. I have referred Documentation
and some blogs. But, couldn't get the right picture. Your reply is
appreciable.

Thanks and Regards,
Raj Kumar.