Excerpts from mail: 3-Aug-94 Re: One last post about PCI Jim
[EMAIL PROTECTED] (625*)
> From a practicle standpoint, if you have someone sniffing your
> net, you have bigger problems than just someone finding a PC connecting
> to AFS's password....
Well, not really, as that's the problem at hand for many network sites
around the nation.
One of the earlier problems with PCI (as we saw it) had been that users
needed to telnet to a translator host, or otherwise send a userid and
password in the clear, in order to gain AFS authentication. That posed an
unreasonable security risk even within closed networks, especially
considering that PC access to AFS can potentially increases the AFS user
base ten fold, or so. This being remedied, albeit not with
kerberos-strength, is a big plus.