[rescue] FW: Sun Microsystems to Cut Jobs, Sees Wider-Than-Expected Loss

[James Lockwood]

On Fri, 5 Oct 2001, Dave McGuire wrote:

>   It does, but in a different way.  It's neat, actually, if a little
> complex.  But it scales VERY well.

It is definitely complex, with several easy pitfalls to fall into (such as
Key=IVEC, for example).  If you don't use subkeys to perturb IVEC and are
using des-cbc-crc you are in a fair amount of danger.  I don't know if
this is still the default (it was when kerb5 was introduced).

The problem with Kerberos, if there is one, is that it solves too many
problems.  It is a massive beast, but is scalable once set up without a
doubt.

-James