[16646] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Re: KDC query client performance

daemon@ATHENA.MIT.EDU (Henry B. Hotz)
Wed Feb 16 12:31:55 2011

Mime-Version: 1.0 (Apple Message framework v1082)
From: "Henry B. Hotz" <hotz@jpl.nasa.gov>
In-Reply-To: <mailman.4153.1297874880.10242.krbdev@mit.edu>
Date: Wed, 16 Feb 2011 09:31:48 -0800
Message-Id: <37B9910F-16F7-46CF-A67B-F79AB1EB4151@jpl.nasa.gov>
To: "krbdev@mit.edu" <krbdev@mit.edu>
Cc: nico103@gmail.com
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu


On Feb 16, 2011, at 8:48 AM, krbdev-request@mit.edu wrote:

> It'd be nice if the client could do a lightweight ping of multiple TGSes
> in parallel...


. . . that didn't open the kdc up to a ping-pong attack.  I'm sure there's some value of "less well formed" which satisfies this, but I wonder if the issue isn't complex enough to need standards action, not merely an implementation choice.
------------------------------------------------------
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu




_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

home help back first fref pref prev next nref lref last post