[27701] in Kerberos
Re: confusion in ank.
daemon@ATHENA.MIT.EDU (Russ Allbery)
Mon Apr 23 14:01:23 2007
From: Russ Allbery <rra@stanford.edu>
To: kerberos@mit.edu
In-Reply-To: <87ps5v3tqe.fsf@squeak.fifthhorseman.net> (Daniel Kahn Gillmor's
message of "Mon, 23 Apr 2007 13:07:05 -0400")
Date: Mon, 23 Apr 2007 10:59:06 -0700
Message-ID: <87tzv7vuol.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Daniel Kahn Gillmor <dkg-mit.edu@fifthhorseman.net> writes:
> i agree that it's worthwhile to support expiration policy for
> randomly-generated keys.
I do too. Audits often require that one rekey a system on a periodic
basis, and being able to enforce that with expiration policy is useful.
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
