Subject: pkinit: I think unauthenticated plaintext is OK

From: Sam Hartman <[email-masked]>
Date: Sat, 20 Nov 2004 20:59:17 -0500

As a side note, unauthenticated plaintext is the wrong word; we should
consider non-integrity-protected or unprotected plaintext.

I think that pkinit is OK in this regard.  The only items that are not
protected are the list of certifiers trusted by the client and the
client's requested KDC cert.

The worst possible attack is that an attacker could convince a KDC to
use a weaker but still acceptable key to sign its reply to a client.

--Sam