[160] in Zephyr_Comments

home help back first fref pref prev next nref lref last post

Why Kerberos tickets?

daemon@ATHENA.MIT.EDU (bjaspan@ATHENA.MIT.EDU)
Thu Feb 23 18:42:43 1989

From: <bjaspan@ATHENA.MIT.EDU>
Date: Thu, 23 Feb 89 18:39:32 EST
To: zephyr-comments@ATHENA.MIT.EDU
Cc: watchmakers@ATHENA.MIT.EDU

>> Note that in no case can someone determine someone's location without
>> using Kerberos authentication.  This is a constraint that was proposed
>> by Saltzer so that random "outside forces" cannot invade the privacy
>> of local users.

My original suggestion was for finger to ask Zephyr about whether a 
given user was _logged in_, not where that person actually was.  

f dzoller@eagle.wesleyan.edu will tell me if my friend David is
currently logged in, and Wesleyan does not require anything like
Kerberos tickets for the service.  If Athena requires that anyone
on the Internet must have tickets to determine if I am logged in, that
is (gasp!) fascist; more so than other institutions.

Barr3y

PS: Rob, the correct name is "zephyr-comments", not "zephyr_comments".  I
made that same mistake the first time I send my message..

home help back first fref pref prev next nref lref last post