I understand kerberos provides authentication using encryption. I see it exchanges session keys. Are those session keys used for applications send their data over that network encryption after authentication is performed?
For an example to clarify:
If I kerberize my telnet server and client will my client and server session then also be encrypted (presumably using the aforementioned session keys) (i.e a sniffer can't see the commands I type in the session)?
I see that HTTP based SPNEGO kerberos does not follow this and one would need to use SSL to secure the session.