Security Question
joe o'toole <[email protected]>
| Newsgroups | gmane.comp.file-systems.sfs.general |
|---|---|
| Message-ID | <[email protected]> |
The following text is taken from the SFS FAQ (http://www.fs.net/sfswww/sfsfaq.html): "AFS, another widely-used network file system, does not keep the contents of private files secret from network eavesdroppers. Moreover, AFS uses an insecure message authentication code (MAC) to protect the integrity of communication between clients and servers. An active attacker can, with very little computation, tamper with and change the contents of AFS messages in transit." Based on my high level understanding of Kerberos (used by AFS), once the users have obtained credentials and are authenticated the traffic between parties is securely transmitted. This seems to clash with the statements in the FAQ. Is there further documentation to be read or can someone explain this? __________________________________ Do you Yahoo!? Friends. Fun. Try the all-new Yahoo! Messenger. http://messenger.yahoo.com/