A New Internet-Draft is available from the on-line Internet-Drafts directories. Title : Public Key-Based Kerberos Cross Realm Path Traversal Protocol Using Kerberized Certification Authorities (kx509) and PKINIT Author(s) : Nicolas Williams Filename : draft-williams-kitten-krb5-pkcross-02.txt Pages : 14 Date : 2013-08-13 Abstract: This document specifies a protocol for obtaining cross-realm Kerberos tickets using existing, related protocols: kerberized certification authorities (kx509) and public key cryptography initial authentication in Kerberos (PKINIT). The resulting protocol has a number of desirable security properties, including privacy protection for the user relative to their home realm's infrastructure, as well a support for leap-of-faith trust establishment, and automated cross- realm keying. This protocol allows Kerberos to scale to large numbers of realms. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-williams-kitten-krb5-pkcross There's also a htmlized version available at: http://tools.ietf.org/html/draft-williams-kitten-krb5-pkcross-02 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=draft-williams-kitten-krb5-pkcross-02 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ _______________________________________________ I-D-Announce mailing list I-D-Announce@ietf.org https://www.ietf.org/mailman/listinfo/i-d-announce Internet-Draft directories: http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt
