No mention of _kerberos TXT in RFCs / but we have DNSSEC now

Rick van Rein rick at openfortress.nl
Sun Oct 19 10:51:14 EDT 2014


Hello all,

Based on the responses in this thread, I have drafted a proposal for TXT records, and posted it to Kitten.

Any feedback on this is welcome and helpful; but Kitten is probably the best place for it.

Thanks,
 -Rick

> After a discussion on kerberos at mit.edu about the TXT records that never made it into a standard, we realised that the recent success of DNSSEC provides a new opportunity for this dnsname-to-realmname mapping.  Below is a proposal to that end.
> 
> Title: Finding the Kerberos Realm of a Service in DNS
> Draft: draft-vanrein-dnstxt-krb1-00
> Location: http://datatracker.ietf.org/doc/draft-vanrein-dnstxt-krb1/
> 
> This is part of my endeavour to move Kerberos towards realm crossover, for which finding a service’s realmname can be all but trivial.
> 
> Any comments on this are highly appreciated!



More information about the Kerberos mailing list