Re: No mention of _kerberos TXT in RFCs / but we have DNSSEC now

2014-10-19 Thread Rick van Rein
Hello all, Based on the responses in this thread, I have drafted a proposal for TXT records, and posted it to Kitten. Any feedback on this is welcome and helpful; but Kitten is probably the best place for it. Thanks, -Rick After a discussion on kerberos@mit.edu about the TXT records that

Adding higher grade crypto to existing KDC servers while maintaining weak

2014-10-19 Thread William Clark
I know this seems like an idiotic thing, but here is the scenario. I have a multi KDC setup that has been the backbone of Kerberos for a large organization. Traditionally we have had to keep week crypto around because of some legacy tools that cannot be rewritten at this time. I want to

Re: Adding higher grade crypto to existing KDC servers while maintaining weak

2014-10-19 Thread Benjamin Kaduk
Hi William, On Sun, 19 Oct 2014, William Clark wrote: I know this seems like an idiotic thing, but here is the scenario. I have a multi KDC setup that has been the backbone of Kerberos for a large organization. Traditionally we have had to keep week crypto around because of some legacy