Files
heimdal/lib
Luke Howard f95f4bc99e krb5: require strengthen_key when FAST + GSS PA
Always require a strengthen key to be used if GSS pre-authentication is used
within FAST. TRhis avoids a MITM attack that could result in unintended
privilege escalation, should a KDC add additional positive authorization data
from the armor ticket to the issued ticket.

An upcoming revision of the draft will reflect this.
2021-12-14 09:03:42 +11:00
..
2021-09-10 09:11:23 +10:00
2021-11-29 12:50:26 +11:00
2021-11-29 12:50:26 +11:00
2021-11-29 12:50:26 +11:00
2017-03-10 15:47:43 -05:00
2016-11-08 15:48:40 -05:00
2016-12-15 12:15:56 -06:00