up vote 0 down vote favorite
share [g+] share [fb]

If I want to use kerberos instead of https (http over ssl) how do I make sure data is not tampered or read in the transit?

link|improve this question
Generally, you use both SSL and Kerberos to put an extra layer of security (SSL) over the Kerberos ticket exchange. – wzzrd Oct 21 '10 at 13:33
feedback

2 Answers

up vote 0 down vote accepted

You have a false premise, but your question can be answered.

Encrypt the data. You can use secret-key encryption or public-key encryption (usually in conjunction with secret-key encryption - for non trivial amounts of data). Plus a secure method of key exchange.

Generally it is better to use a well tested solution (e.g. HTTPS or SSH) than try to create your own solution.

link|improve this answer
Probably I was looking for something like this tools.ietf.org/html/draft-ietf-tls-kerb-cipher-suites-00 . But I guess this did not go well beyond a draft. I will stick with existing methods. Thanks. – kalyan Nov 15 '10 at 14:30
feedback
up vote 0 down vote

You're barking up the wrong tree. Kerberos is exclusively an authentication mechanism - it is as much use for the purposes you suggest as a banana.

Why do you want to use HTTPS?

link|improve this answer
In fact, it is possible to use Kerberos session keys for encrypting traffic. LDAP does this, as did Telnet long ago. – grawity May 5 '11 at 14:18
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.