Moving Kerberos to the Cloud?
Nico Williams
nico at cryptonector.com
Wed Dec 7 18:00:24 EST 2011
On Wed, Dec 7, 2011 at 4:28 PM, Bill Doster <billdo at umich.edu> wrote:
> The higher ups presumably asked because they believe that there are potentially some gains to be made by doing so.
>
> Rather than leaving those gains unstated, it would probably be worthwhile to find out what … savings … they are looking/hoping for.
>
> Any (computing) service requires several legs to "stand up": hardware (purchase, operation, maintenance), software (purchase, updates, "tailoring"), __SUPPORT__ (call-in and mail-in support centers, education, documentation, …)
>
> Which of these legs are being envisioned as moving to <the Cloud>?
>
> Unless you can move the support leg, I suspect the savings realized will actually be a pretty small percentage of total costs.
Even if the savings overwhelm the costs, you still need to look at
risk, and thus the security attributes of the cloud in question. With
risk in the picture I suspect no one would move a KDC to a cloud.
Nico
--
More information about the Kerberos
mailing list