CRIME Kerberos summation.

From: Shaun Savage (savages@private)
Date: Wed Jul 17 2002 - 06:26:19 PDT

  • Next message: Zot O'Connor: "CRIME [Fwd: [Evolution] Definitive comments on LINUX viruses]"

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1
    
    Hi
    After reading the responses, I would like to sum it up.
    
    1>  KDC is the weak link.
    2>  requires special services and applications.
    3>  scales up well
    4> basicly good general auth system.
    5> implimantation problems.
    
    Things were said about public key vs symmetric key.  The problem with
    public key crypto is that the private key requires secure private
    storage.  In a community/public workstation network, storage of that
    public key is  needs a central server or user held storage device for
    the private key (smartcards, memory cards or sticks).
    
    Is there a better open protocol for user auth in a community/public
    workstation network?
    If a better open protocol is needed, what would be the specs?
    
    Shaun
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.0.7 (GNU/Linux)
    
    iD8DBQE9NXB4n6I06Opz+XURAj/BAJ9Zd4laZIKxMI6cRlYN3vxZrOBdSgCgot9B
    uYBK8GKZ3S9pX1W8kSrZGh8=
    =Sixm
    -----END PGP SIGNATURE-----
    



    This archive was generated by hypermail 2b30 : Wed Jul 17 2002 - 07:19:23 PDT