Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

If I want to use kerberos instead of https (http over ssl) how do I make sure data is not tampered or read in the transit?

share|improve this question
Generally, you use both SSL and Kerberos to put an extra layer of security (SSL) over the Kerberos ticket exchange. – wzzrd Oct 21 '10 at 13:33
up vote 0 down vote accepted

You have a false premise, but your question can be answered.

Encrypt the data. You can use secret-key encryption or public-key encryption (usually in conjunction with secret-key encryption - for non trivial amounts of data). Plus a secure method of key exchange.

Generally it is better to use a well tested solution (e.g. HTTPS or SSH) than try to create your own solution.

share|improve this answer
Probably I was looking for something like this . But I guess this did not go well beyond a draft. I will stick with existing methods. Thanks. – kalyan Nov 15 '10 at 14:30

You're barking up the wrong tree. Kerberos is exclusively an authentication mechanism - it is as much use for the purposes you suggest as a banana.

Why do you want to use HTTPS?

share|improve this answer
In fact, it is possible to use Kerberos session keys for encrypting traffic. LDAP does this, as did Telnet long ago. – grawity May 5 '11 at 14:18

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.