Excerpts from mail: 3-Aug-94 Re: One last post about PCI Jim
[EMAIL PROTECTED] (625*)

>  From a practicle standpoint, if you have someone sniffing your 
> net, you have bigger problems than just someone finding a PC connecting 
> to AFS's password....


Well, not really, as that's the problem at hand for many network sites 
around the nation.

One of the earlier problems with PCI (as we saw it) had been that users 
needed to telnet to a translator host, or otherwise send a userid and 
password in the clear, in order to gain AFS authentication.  That posed an 
unreasonable security risk even within closed networks, especially 
considering that PC access to AFS can potentially increases the AFS user 
base ten fold, or so.  This being remedied, albeit not with 
kerberos-strength, is a big plus.

Reply via email to