Kerberos

• Kerberos is an MIT-developed security system

  keeps passwords off of networks
  

• further development in IETF: RFC 1510

• fields in authentication data for extension

• Microsoft used fields to store MS-specific info

  legit to do so based on standard
  

• refused to document for quite a while

  said would compromise security - reverse of fact
  

• now document but with restrictions on use of info

• IETF has learned - no more such flexibility

Previous slide

Next slide

Back to first slide

View graphic version