Posted in Kerberos

KDC Proxy for Remote Access

Published May 27, 2020 | Posted in Authentication

There's a little known feature in Windows called the KDC Proxy that lets clients communicate with KDC servers over an HTTPS channel instead of TCP. Read Article

About Steve Syfuhs

Steve Syfuhs is a developer on the Windows Cryptography, Identity, and Authentication team at Microsoft building authentication stuff for all your favorite operating systems.

About Cryptography in Kerberos.NET

Published Jan 10, 2020

The Kerberos.NET library relies on a few cryptographic primitives for Kerberos. This post describes what those primitives are and how they're used.

Read Article | Kerberos

Cross Platform Support for Kerberos.NET

Published Dec 30, 2019

Kerberos.NET is built to be used across multiple platforms, however there are some caveats.

Read Article | Kerberos.NET

A Deep Dive into the Design of Kerberos.NET

Published Dec 23, 2019

The Kerberos.NET library has undergone significant redevelopment over the last year and has introduced many new features across both client and server.

Read Article | Kerberos

Why is Kerberos Terrible?

Published Dec 31, 2018

Tl;dr; It’s really not. As we build new protocols we should remember all the things we got right with Kerberos and account for all the things we got wrong.

Read Article | Authentication