Kerberos for Wireless Authentication
Jeffrey Altman
jaltman at columbia.edu
Fri Jun 3 14:21:16 EDT 2005
Saber Zrelli wrote:
> I think that the problem tagetted by IAKERB are a big obstacle that
> limit the scenarions where Kerberos can be used.
>
> Specially, concerning wireless access networks, Kerberos can be very
> convenient due to the fact that tickets have life-times, which means
> that clients do not need to ride the full authentication path each
> time they perform a hand-over. Current methods based on EAP, are
> defining context transfer protocols to attack the problem related to
> the latency of handovers ( CTP for PANA in PANA wg ). Kerberos IMHO,
> can offer fast handover in wireless access networks, but it requires
> some complementary protocols such as IAKERB.
>
> I really think that working on this axis should be amongst the
> milestones of kerberos wg.
There is only so much that the active members of the working group
can work on at a given time. If members of the wireless community
were to participate in the working group, it would increase the amount
of work that can be accomplished.
Jeffrey Altman
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3256 bytes
Desc: S/MIME Cryptographic Signature
Url : http://mailman.mit.edu/pipermail/kerberos/attachments/20050603/e025b7de/attachment.bin
More information about the Kerberos
mailing list