Re: The usability of service ticket lifetimes
"Henry B. Hotz" <[email protected]> Tue, 21 Aug 2012 13:49:03 -0700
| Newsgroups | gmane.ietf.krb-wg |
|---|---|
| Message-ID | <[email protected]> |
On Aug 21, 2012, at 11:49 AM, Jeffrey Hutzelman wrote: > As an operator, I'd be nervous about replacing a relatively simple, > easily-understood rule (a policy change is in effect by the time any > TGT issued prior to it has expired) with one involving complex > interactions between all of the services a user might have used. +1 KISS Otherwise you can't analyze the protocol and understand all the implications in all cases. Let's not forget that some of the people who need to understand the rules and their implications are not Kerberos experts. ------------------------------------------------------ The opinions expressed in this message are mine, not those of Caltech, JPL, NASA, or the US Government. [email protected], or [email protected] _______________________________________________ ietf-krb-wg mailing list [email protected] https://lists.anl.gov/mailman/listinfo/ietf-krb-wg