[1265] in Kerberos

home help back first fref pref prev next nref lref last post

Re: timestamp in authentication process

daemon@ATHENA.MIT.EDU (paulf)
Thu Feb 28 18:04:48 1991

Date: Thu Feb 28 11:04:55 PST 1991
From: paulf@shasta.Stanford.EDU (paulf)
To: kerberos@shelby.Stanford.EDU

In article <9140@star.cs.vu.nl> leendert@cs.vu.nl (Leendert van Doorn) writes:
>Its my opinion that this premise is very difficult to fulfill. There are
>two options here: the time server is un-authenticated, or is authenticated.

Actually, not so difficult.  NTP accuracies of milliseconds are common, and
NTP version 2 has a full encyption system for security (although some of the
implementations are weak, leaving the DES keys out in the open) ("Nothing is
so common as the incomplete execution of a Good Idea".).

-=Paul Flaherty, N9FZX      | "Think of it as evolution in action."
->paulf@shasta.Stanford.EDU |       -- Larry Niven and Jerry Pournelle

home help back first fref pref prev next nref lref last post