Jeffrey Hutzelman <[email protected]> writes:

> --On Saturday, October 03, 2009 12:19:51 AM -0700 Russ Allbery
> <[email protected]> wrote:

>> -      <t>This attack can be ameliorated if the client is authenticated

> Properly, the attack is ameliorated if the _server_ is
> authenticated. Authentication schemes are possible which prove the
> client's identity but not the server's, and these would not protect
> against such an attack.

Fixed, thanks.

-- 
Russ Allbery ([email protected])             <http://www.eyrie.org/~eagle/>

_______________________________________________
AFS3-standardization mailing list
[email protected]
http://michigan-openafs-lists.central.org/mailman/listinfo/afs3-standardization

Reply via email to