[2248] in Kerberos
Re: Kerberos V5 ASN.1 observation
daemon@ATHENA.MIT.EDU (smb@ulysses.att.com)
Fri Oct 2 11:20:09 1992
From: smb@ulysses.att.com
To: "John Linn. LKG1-2/A19. { -486 or DTN 226}-7384. 02-Oct-1992 0910" (508) <linn@albeit.enet.dec.com>
Cc: kerberos@Athena.MIT.EDU, kaufman@kibitz.enet.dec.com
Date: Fri, 02 Oct 92 10:40:57 EDT
It's also worth noting that there are security advantages to using
at least some explicit typing. Specifically, if fields aren't
typed, it's a lot easier to do cut-and-paste attacks. Michael Merritt
and I discussed this at greater length in our critique of Kerberos.
--Steve Bellovin
