I-D Action: draft-guo-krb-spake-2fa-02.txt
[email protected] Sun, 26 Jul 2026 23:30:32 -0700
| Newsgroups | gmane.ietf.announce |
|---|---|
| Message-ID | <178513383225.1109409.9477852953719599617@dt-datatracker-d4d6ff9d9-fsx7d> |
Internet-Draft draft-guo-krb-spake-2fa-02.txt is now available.
Title: Kerberos SPAKE with Two-Factor Authentication
Authors: Wei Guo
Liang Xia
Ji Li
Yong Li
Name: draft-guo-krb-spake-2fa-02.txt
Pages: 8
Dates: 2026-07-26
Abstract:
This document defines a new two-factor authentication mechanism for
the Kerberos SPAKE pre-authentication. The mechanism uses the time-
based one-time password (TOTP) as a second factor, and combines it
with the password factor in a more secure way, which can prevent
attackers from both impersonating Kerberos clients and obtaining
TGTs' session keys in case of any factor leakage.
The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-guo-krb-spake-2fa/
There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-guo-krb-spake-2fa-02.html
A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-guo-krb-spake-2fa-02
Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts
_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]