Wang Shouhua <[email protected]> writes: > On 2 April 2014 20:45, Russ Allbery <[email protected]> wrote:
>> With Kerberos, it's always worth being aware that it's a trusted >> central authentication system. > Isn't there a distributed version of Kerberos5 which avoids this > problem? Trusted third party is inherent in the Kerberos protocol, and indeed inherent in Needham-Schroeder. If it didn't use trusted third party, it wouldn't be Kerberos, it would be something else. -- Russ Allbery ([email protected]) <http://www.eyrie.org/~eagle/> ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
