Subject: [Ietf-krb-wg] Re wglc of draft-ietf-krb-wg-iakerb-01

From: Love Hörnquist Åstrand <[email-masked]>
Date: Mon, 24 Nov 2008 16:20:58 -0800

Re wglc of draft-ietf-krb-wg-iakerb-01

I think the draft does not explain how the proxy protects itself  
agaist unwanted traffic, how the proxy only allow kerberos traffic but  
not any other encrypted kerberos like traffic.

Only allow traffic to port 88 seems a little bit weak.

If it can't it should limit to what hosts and for what realms it allows.

Love

_______________________________________________
ietf-krb-wg mailing list
[email-masked]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg