Subject: [Ietf-krb-wg] Benefits of using FAST in TGS

From: "Srinivas Cheruku" <[email-masked]>
Date: Wed, 27 May 2009 14:16:39 +0530

Sam,

What are the big benefits of using FAST in TGS?

1.       In case of any error, KRB-ERROR data would be protected

2.       The request body is protected using FAST.

3.       The pre-auth data PA-TGS-REQ is outside fast. So, non-encrypted
fields in AP-REQ are still vulnerable. Is there any big risk? Is this padata
outside FAST for any interoperability reason with non FAST KDCs?

4.       Is there any other pre-auth data PA-TGS-REQ, that can be used in
TGS-REQ and this can be protected by FAST?

Thanks,
Srini

_______________________________________________
ietf-krb-wg mailing list
[email-masked]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg