In kerberos authentication, the encrypted messages are added a timestamp, in order to prevent replay attacks. Basically once someone decrypts a message that was sent for him, it compares the timestamp with the current time, and if it can tolerate the time difference between the time the message was encrypted and the current time, it considers it as valid.
But what will happen if we put a futuristic timestamp on a kerberos ticket?
what will happen if a KDC decrypts a ticket at 17:34, but the current timestamp is something like 18:28?
If it will let me in and validate my ticket, what prevents me of putting the timestamp for 100 years in the future, and thus getting unlimited timestamp on every ticket I send?