Subject: Re: Kerberos Digital Signatures ?

From: "Frank Balluffi" <[email-masked]>
Date: Wed, 18 Jun 2003 16:44:22 -0400

Yes, but the server can see the authorization data. My thinking was to "certify" the public key at the time of signing. That said, I have no idea if this would be useful to anyone.

Frank

                      Nicolas Williams                                                                                                 
                      <Nicolas.Williams        To:       Frank Balluffi/NewYork/DBNA/DeuBa@DBNA                                        
                      @sun.com>                cc:       "Tim Alsop <Tim.Alsop", [email-masked],                                  
                                                [email-masked]                                                 
                      06/18/2003 04:15         Subject:  Re: Kerberos Digital Signatures ?                                             
                      PM                                                                                                               

On Wed, Jun 18, 2003 at 04:03:58PM -0400, Frank Balluffi wrote:
>
> Tim,
>
> No, but I guess one idea would be for a KDC to optionally put the public key belonging to a client into the authorization data element of tickets granted to it.

No.  The client doesn't get to see the authorization data.

You're looking for "ticket extensions" and that is not part of RFC1510
or clarifications.

Nico
--

--

This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden.