Steve on Security

By Steve Syfuhs

Posted in Kerberos

KDC Proxy for Remote Access

Published May 27, 2020 | Posted in Authentication

There's a little known feature in Windows called the KDC Proxy that lets clients communicate with KDC servers over an HTTPS channel instead of TCP. Read Article

Steve Syfuhs

About Steve Syfuhs

Steve Syfuhs is a developer on the Windows Authentication team at Microsoft.

Read More about Steve

github.com/SteveSyfuhs

About Cryptography in Kerberos.NET

Published Jan 10, 2020

The Kerberos.NET library relies on a few cryptographic primitives for Kerberos. This post describes what those primitives are and how they're used.

Read Article | Kerberos

Cross Platform Support for Kerberos.NET

Published Dec 30, 2019

Kerberos.NET is built to be used across multiple platforms, however there are some caveats.

Read Article | Kerberos.NET

A Deep Dive into the Design of Kerberos.NET

Published Dec 23, 2019

The Kerberos.NET library has undergone significant redevelopment over the last year and has introduced many new features across both client and server.

Read Article | Kerberos

Why is Kerberos Terrible?

Published Dec 31, 2018

Tl;dr; It’s really not. As we build new protocols we should remember all the things we got right with Kerberos and account for all the things we got wrong.

Read Article | Authentication

Setting Build Versions for Visual Studio Online

Published Aug 19, 2017

Build versions are critical for managing releases out in the wild. Here's how to set them.

Read Article | .NET

Automated Package Deployments using Visual Studio Online

Published Aug 19, 2017

Automating package release using Visual Studio Online.

Read Article | .NET

Automated Builds of Kerberos.NET Using Visual Studio Online

Published Aug 19, 2017

How to automate builds using Visual Studio Online.

Read Article | .NET

Porting Kerberos.NET to .NET Core

Published Aug 11, 2017

How I ported Kerberos.NET to .NET Core.

Read Article | .NET

Active Directory Claims and Kerberos.NET

Published Jul 29, 2017

Kerberos.NET now supports claims presented by Active Directory.

Read Article | .NET

Kerberos.NET and the KeyTab File

Published Jul 16, 2017

How to use keytab files with Kerberos.NET.

Read Article | Development

On Adding AES Support to Kerberos.NET

Published Jul 10, 2017

The AES cryptographic algorithm was added to the Kerberos.NET library.

Read Article | .NET

Achievement Unlocked: Kerberos.NET Has a Nuget Package!

Published Mar 21, 2017

Kerberos.NET now has a Nuget package!

Read Article | Development

Windows Authentication in IIS with Kerberos.NET

Published Mar 21, 2017

How to make Kerberos.NET work when hosted in IIS.

Read Article | Development

Configuring an SPN in Active Directory for Kerberos.NET

Published Mar 21, 2017

Kerberos requires that SPNs are registered on service principals in Active Directory. Here's how to do that.

Read Article | Active Directory