Addressless Tickets

Russ Allbery rra at stanford.edu
Wed Aug 20 11:24:39 EDT 2003


Wachdorf, Daniel R <drwachd at sandia.gov> writes:

> Its there a reason why Kerberos 1.3.X moved to address-less tickets by
> default?

It doesn't provide a lot of additional security and it constantly causes
things to break when users are behind NAT.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>



More information about the krbdev mailing list