Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 0 down vote favorite

If I want to use kerberos instead of https (http over ssl) how do I make sure data is not tampered or read in the transit?

share|improve this question
Generally, you use both SSL and Kerberos to put an extra layer of security (SSL) over the Kerberos ticket exchange. – wzzrd Oct 21 '10 at 13:33

2 Answers

up vote 0 down vote accepted

You have a false premise, but your question can be answered.

Encrypt the data. You can use secret-key encryption or public-key encryption (usually in conjunction with secret-key encryption - for non trivial amounts of data). Plus a secure method of key exchange.

Generally it is better to use a well tested solution (e.g. HTTPS or SSH) than try to create your own solution.

share|improve this answer
Probably I was looking for something like this tools.ietf.org/html/draft-ietf-tls-kerb-cipher-suites-00 . But I guess this did not go well beyond a draft. I will stick with existing methods. Thanks. – kalyan Nov 15 '10 at 14:30
up vote 0 down vote

You're barking up the wrong tree. Kerberos is exclusively an authentication mechanism - it is as much use for the purposes you suggest as a banana.

Why do you want to use HTTPS?

share|improve this answer
In fact, it is possible to use Kerberos session keys for encrypting traffic. LDAP does this, as did Telnet long ago. – grawity May 5 '11 at 14:18

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.