[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Reverse Lookup Server SSL Certivicate CN

To: "Kurt D. Zeilenga" <Kurt@OpenLDAP.org>
Subject: Re: Reverse Lookup Server SSL Certivicate CN
From: Quanah Gibson-Mount <quanah@stanford.edu>
Date: Wed, 07 Jan 2004 15:35:45 -0800
Cc: ms419@freezone.co.uk, openldap-software@OpenLDAP.org
Content-disposition: inline
In-reply-to: <6.0.0.22.0.20040107151731.0421ca78@127.0.0.1>
References: <03DBBD20-40EE-11D8-87A2-000A95C71776@freezone.co.uk> <6.0.0.22.0.20040107132218.0410be50@127.0.0.1> <183636595.1073487779@cadabra.stanford.edu> <6.0.0.22.0.20040107151731.0421ca78@127.0.0.1>

--On Wednesday, January 07, 2004 3:19 PM -0800 "Kurt D. Zeilenga" <Kurt@OpenLDAP.org> wrote:


I am specifically referring to validation of Kerberos tickets
using information gained through non-secured DNS.  That's broken.
DNS is easily spoofed or otherwise fooled into giving out
incorrect information.

I certainly agree there. ;) My response was really geared to what Jack had stated though, because that bit really didn't seem correct to me. ;)

--Quanah

--
Quanah Gibson-Mount
Principal Software Developer
ITSS/TSS/Computing Systems
ITSS/TSS/Infrastructure Operations
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html

Follow-Ups:
- Re: Reverse Lookup Server SSL Certivicate CN
  - From: Simon Wilkinson <simon@sxw.org.uk>

References:
- Reverse Lookup Server SSL Certivicate CN
  - From: ms419@freezone.co.uk
- Re: Reverse Lookup Server SSL Certivicate CN
  - From: "Kurt D. Zeilenga" <Kurt@OpenLDAP.org>
- Re: Reverse Lookup Server SSL Certivicate CN
  - From: Quanah Gibson-Mount <quanah@stanford.edu>
- Re: Reverse Lookup Server SSL Certivicate CN
  - From: "Kurt D. Zeilenga" <Kurt@OpenLDAP.org>

Prev by Date: Re: Reverse Lookup Server SSL Certivicate CN
Next by Date: Initial 2.2.4 exploration results
Index(es):
- Chronological
- Thread