appl/simple/client/sim_client.c uses internal APIs
Ken Hornstein
kenh at cmf.nrl.navy.mil
Fri Feb 24 14:24:58 EST 2023
>I guess if I’m on a tear saying forbidden things, sometimes identity is all
>you need, you don’t want all the samples to encrypt everything, because
>that makes it look like you have to, which you don’t? It is use-case
>dependent, and krb5 is great because it is granular enough to let
>developers choose what they do for their own use-cases.
I'd like to push back on THIS a bit.
While I agree that you don't ALWAYS need to encrypt everything, I would
argue that in 2023 you should to encrypt everything 99% of the time, and
the 1% you don't you should think about very carefully. And having the
samples encrypt stuff would be helpful as examples (and to take later
further point, the breakdown between sample/simple always confuses me as
well).
--Ken
More information about the Kerberos
mailing list