If I want to use kerberos instead of https (http over ssl) how do I make sure data is not tampered or read in the transit?
Asked
Active
Viewed 352 times
2 Answers
0
You're barking up the wrong tree. Kerberos is exclusively an authentication mechanism - it is as much use for the purposes you suggest as a banana.
Why do you want to use HTTPS?
![](../../users/profiles/35483.webp)
symcbean
- 19,931
- 1
- 29
- 49
-
In fact, it is possible to use Kerberos session keys for encrypting traffic. LDAP does this, as did Telnet long ago. – user1686 May 05 '11 at 14:18
0
You have a false premise, but your question can be answered.
Encrypt the data. You can use secret-key encryption or public-key encryption (usually in conjunction with secret-key encryption - for non trivial amounts of data). Plus a secure method of key exchange.
Generally it is better to use a well tested solution (e.g. HTTPS or SSH) than try to create your own solution.
![](../../users/profiles/55524.webp)
RedGrittyBrick
- 3,792
- 1
- 16
- 21
-
Probably I was looking for something like this http://tools.ietf.org/html/draft-ietf-tls-kerb-cipher-suites-00 . But I guess this did not go well beyond a draft. I will stick with existing methods. Thanks. – kalyan Nov 15 '10 at 14:30