* Replacing the TGT by encrypting and signing as a JWT and shoving in to 
replace the traditional TGC

^^ that'll make a bit more sense I hope.

On Thursday, November 18, 2021 at 9:32:34 AM UTC-5 sean.baker wrote:

> Good morning y'all!
>
> I wonder -- has anyone tried replacing the TGC by encrypting and signing 
> it as a JWT and shoving it in to replace the traditional TGC? More elegant 
> solutions are also welcome -- as we assess the complexity of modern 
> broker-based shared ticket caching mechanisms, this increasingly feels like 
> a potentially simpler way of achieving fault tolerance. I'd much rather 
> throw a little more compute at each ticket than to open 2+ more ports, add 
> new protocols, and swaths more code 'attack surface'
>
> That said, I've been away from the game a while, so don't hold back if 
> it's a dumb idea.... Not my first or last.
>
> Thanks!
>
> Sean
>
> -- 
>
> Sean R. Baker
> Uniformed Services University
>
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/56b99131-ade8-4302-bf93-47556467937fn%40apereo.org.

Reply via email to