Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

You are in the hall of the mountain king.

devel / comp.protocols.kerberos / RE: Protocol benchmarking / auditing inquiry

SubjectAuthor
o RE: Protocol benchmarking / auditing inquiryBrent Kimberley

1
RE: Protocol benchmarking / auditing inquiry

<mailman.21.1707942229.2322.kerberos@mit.edu>

  copy mid

https://www.novabbs.com/devel/article-flat.php?id=472&group=comp.protocols.kerberos#472

  copy link   Newsgroups: comp.protocols.kerberos
Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!tncsrv06.tnetconsulting.net!.POSTED.mailman.mit.edu!not-for-mail
From: Brent.Ki...@Durham.ca (Brent Kimberley)
Newsgroups: comp.protocols.kerberos
Subject: RE: Protocol benchmarking / auditing inquiry
Date: Wed, 14 Feb 2024 20:23:41 +0000
Organization: TNet Consulting
Lines: 49
Message-ID: <mailman.21.1707942229.2322.kerberos@mit.edu>
References: <YT1PR01MB4187CA8C93DE6AC8560FB1BCFA4E2@YT1PR01MB4187.CANPRD01.PROD.OUTLOOK.COM>
<YT1PR01MB418752C508C40187D7D88BC8FA4E2@YT1PR01MB4187.CANPRD01.PROD.OUTLOOK.COM>
<ba168ba8-161d-47c1-82e2-edf4cba957c7@acm.org>
<YT1PR01MB418788B7045DF1E5B375143FFA4E2@YT1PR01MB4187.CANPRD01.PROD.OUTLOOK.COM>
Mime-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
Injection-Info: tncsrv06.tnetconsulting.net; posting-host="mailman.mit.edu:18.7.21.50";
logging-data="28113"; mail-complaints-to="newsmaster@tnetconsulting.net"
To: "Christopher D. Clausen" <cclausen@acm.org>, "kerberos@mit.edu"
<kerberos@mit.edu>
DKIM-Filter: OpenDKIM Filter v2.11.0 unknown-host (unknown-jobid)
Authentication-Results: mailman.mit.edu;
dkim=pass (1024-bit key, unprotected) header.d=mitprod.onmicrosoft.com
header.i=@mitprod.onmicrosoft.com header.a=rsa-sha256
header.s=selector2-mitprod-onmicrosoft-com header.b=uC/SAzdQ;
dkim=pass (2048-bit key,
unprotected) header.d=durham.ca header.i=@durham.ca header.a=rsa-sha256
header.s=selector2 header.b=d2pFsm4F
ARC-Seal: i=3; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass;
b=GB++djzP0eCpaNCr/gtcAHaVUN/iq1Bc46xW/eoPzO+WfmfQwBH8d9p/orCpKJftFuMb2bhkbV/PZF87y1FTL+ANdHBDwPzKJzWypxoCnODrbsztU7VW53XBpBnUhmZkyIcxQ+BOhOzFpBp4uccy9ufm3bNE7FSYPjTpH8knb2jKQSAmlR/Y5IN8i5ya6c00PaXwbAXIZZVk/vPlUJAlEk3l4j3iggfkq5bOFnZLjubqiig0Ep/bN8i2wac6IrgNiCzDhJGX5oHdhmc2gfcbTsXDjQoBg3/wep7lzL8tvhZFHq1bTVvW9KAqqKgG6RGUkiwPgwzHnZN1FJR2fp2oFg==
ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=NpdB1Wauh0Jz/cBKQZlSTpl4iv0ROZ3PwoCV3iSUof8=;
b=Ppt0RDdnVL3Es0bUrPJSyxIO8ckJR6zLUJ1EIWhAaK8TY33Hurs/sThpCX98UiTMBsQ1Kdtyd3PPQKZS4YZjuP+h7xdbjyx5r+f4OaxNp4tUVfXymKTbrbJCDXUtsLVkt+XnNgp0yaNlacV6f2IZtS08FOnYWi44Pkb7dqgVM2RxtiU3bHjLtKX6JSeswND/WYfhPzc/TZuP66cjUzD2lZ9swvxRnlM1IbeFsgJxnAPrf/tOnzF+ahNZ4qvcyOllVunbX4R/88Ch1jZrZj95txbunRacx193kYKa0i2eo+2HF/cGMnqPIntPfZ2zmOPAzJBoBJ8jpFqRt5Jt25wLJA==
ARC-Authentication-Results: i=3; mx.microsoft.com 1; spf=pass (sender ip is
40.107.115.121) smtp.rcpttodomain=mit.edu smtp.mailfrom=durham.ca; dmarc=pass
(p=reject sp=none pct=100) action=none header.from=durham.ca; dkim=pass
(signature was verified) header.d=durham.ca; arc=pass (0 oda=1 ltdi=1
spf=[1,1,smtp.mailfrom=durham.ca] dkim=[1,1,header.d=durham.ca]
dmarc=[1,1,header.from=durham.ca])
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=mitprod.onmicrosoft.com; s=selector2-mitprod-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=NpdB1Wauh0Jz/cBKQZlSTpl4iv0ROZ3PwoCV3iSUof8=;
b=uC/SAzdQWWAcEKF9LIYreQc5pcmQd9cb0Teer6iaVlZwku5gO4+vdp0P4bs1NOnfPXhPCS/JUohScaoGxL3ksV0oVjP18OpXDTOq5UMSc8MANCt2Lvp0LrInmKU8CezA4UdR6icgVrWqQcocVjuIKPGQN/ra7CGDbKZrA0SY5fc=
ARC-Seal: i=2; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass;
b=hlPwG4ULRuZSjZLdvMdyURQhE77MPmtl9utEE3poJ+KDGn3aus9WW5C4zXwsZxAgM8anMEpKKrHUhWd6+3mAHOlv4uWVM9usYiDDrG9BX29mhY4Fn5Xv1l9KRXR8ATfzOk7X07k8PgfYHc70wxG6TCeDhGUMOfN9Knot/wX1dPWllViwoknCPb3wVCel5RpAhqMVymAyVrgFeJmSJXXy73v3Nnh6/rpbZtcE9HgHXeYNJSH/wSTBQcwWsVPqYpyQ6MZa1g3PhpoSvm1H5C0DNEWmVD7mAAnDVLHWbiBaFVM1ll8rLuNEbOAnPK1vtnTtAUFBPGH4lDf5/nTzQ9dMiw==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=NpdB1Wauh0Jz/cBKQZlSTpl4iv0ROZ3PwoCV3iSUof8=;
b=EF0qLqiluuQwyi3yUxIANyaiRfQFXWldjPdSK24PYpPjvFJ/2J6kR8GxC2XGO/BfsSkgyDOFkSdUVCVQPlLrZzlEveq+3KjE1JbdhEfPRhgZPW2dvaM5DRB1QwMNEqRGxXREXj3NxbzV+AkFCRsGYeFYJZvbAmnhJSY6Vq7b2DV5VCGCqB5kHwDo29swYx08FbGE1Gu4L1bxq/lHpr99qWwAJoh6DTGY+yvp/yNhn+8H2LQ/kHw45jVe/5X9y4hUknoG3TFQhya58K0/Cf3nKrf+OQT+RMgg6oFzkizz1gA3ciQr6UEvIPxGB0hPCTzLoTqcjDeCDUEfStMQy1Inhw==
ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=pass (sender ip is
40.107.115.121) smtp.rcpttodomain=mit.edu smtp.mailfrom=durham.ca; dmarc=pass
(p=reject sp=none pct=100) action=none header.from=durham.ca; dkim=pass
(signature was verified) header.d=durham.ca; arc=pass (0 oda=1 ltdi=1
spf=[1,1,smtp.mailfrom=durham.ca] dkim=[1,1,header.d=durham.ca]
dmarc=[1,1,header.from=durham.ca])
Authentication-Results: spf=pass (sender IP is 40.107.115.121)
smtp.mailfrom=Durham.ca; dkim=pass (signature was verified)
header.d=durham.ca;dmarc=pass action=none header.from=Durham.ca;
Received-SPF: Pass (protection.outlook.com: domain of Durham.ca designates
40.107.115.121 as permitted sender) receiver=protection.outlook.com;
client-ip=40.107.115.121; helo=CAN01-YT3-obe.outbound.protection.outlook.com;
pr=C
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=F7lXS5uGdWMzjEKdAELodMjtXma1zc0nwUXVmqzbwgbj0w4M2hvpNGJHzlcW+ISAa0ABPeHOpJ4WWpBMRQEuXPJjmvvoAgYB9pOvn3O7lL5rcJTxoGAridlRRe3jsqIguxPxfOn+sV/pi86jHEzUUfLcCPvS7gc39WyfapMmfDQYFKetjiAa9pDsc3TW4Pfb99jEuZg7+DfsQOk3CjXuWZxkF90w8L44S2s8+rZ8AoVpPEM5w8OhsgGaqqdO8VPM8HGxrFCg095yXTehTcqoZo88emtdkD/+Aj9yS84ai+7br8kS6rbBVyWCK/bq/UyuurfeILUpE47bmOo57qofng==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=NpdB1Wauh0Jz/cBKQZlSTpl4iv0ROZ3PwoCV3iSUof8=;
b=f3aMAASktCXriJI4WVdynP6aIn2b6peva8ZGU38YsUA691sxuCMoAjsWd0S4A3cpQ8a21HmpIIEWF2KARW5fglOysrnXZenyDkxeZmQ8/OwDkVu8yrV3285UWWE3GE7uK5VyHx+dXRMZJFuqdwAvQyjWf14H5mKv2MpofLryqahfHXd6YldsdNTfnVt1bPuGv3XDkq+AcyMV1bMfyDEPLLvgXEnkMSPPeVSQg3C2TPFXIVx8409c+3TJ7QwPiF7JHe6SixrjTpoSzWVq2Lb7jvpmyTqbOXBClOS8AjJzlM4+qId/09rfmxsF6R68TDgv/LXLdhxAbodAxwNhr+SZzw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
smtp.mailfrom=durham.ca; dmarc=pass action=none header.from=durham.ca;
dkim=pass header.d=durham.ca; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=durham.ca; s=selector2;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=NpdB1Wauh0Jz/cBKQZlSTpl4iv0ROZ3PwoCV3iSUof8=;
b=d2pFsm4FdZG9Mkj3chn+VhxYo+hze+TFXcc0oTyEu8l5JVT2CDIV2A+mjTc0l8klhtQECwDJBUuzrY12jvewpTw/6FzURJOpCqFo+gGNAPHEfwKwqNV2TQWFpBUE5Uyj0/jYeNL8Q2LcfaEN1RYBmx+qTbRlM7YAbUb8z/w5I2j+VbkZvL6uejyBKBwTenMkK2Ou1DyM4EBrwgqSUKbllUcRtXS9BPO3rbeY2xAi1NwgFE6F9p+1X3xCqRbfAK3iotse6fGxkwP/lVNHVI9v4v71lH5+oVNJ44B9ggeaL1Ovt0DzWZqFQPD12tGW00UO29Yjmt7GcK2LHBPkG+qMWw==
Thread-Topic: Protocol benchmarking / auditing inquiry
Thread-Index: AdpfbJNnl5mSPDfJShm0AzMzygkU8wAASQPAAALoPgAAAn8VMA==
In-Reply-To: <ba168ba8-161d-47c1-82e2-edf4cba957c7@acm.org>
Accept-Language: en-US, en-CA
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Authentication-Results-Original: dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=Durham.ca;
x-ms-traffictypediagnostic: YT1PR01MB4187:EE_|YT2PR01MB6093:EE_|DS3PEPF000099DE:EE_|DM8PR01MB7109:EE_
X-MS-Office365-Filtering-Correlation-Id: e4e67582-a717-4816-b713-08dc2d9ad708
x-ms-exchange-senderadcheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original: 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
X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en;
SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:YT1PR01MB4187.CANPRD01.PROD.OUTLOOK.COM;
PTR:; CAT:NONE;
SFS:(13230031)(396003)(346002)(376002)(39860400002)(366004)(136003)(230922051799003)(230473577357003)(230273577357003)(1800799012)(64100799003)(186009)(451199024)(5660300002)(8676002)(52536014)(66556008)(66446008)(64756008)(66476007)(66946007)(76116006)(8936002)(2906002)(83380400001)(38070700009)(26005)(33656002)(122000001)(86362001)(110136005)(71200400001)(38100700002)(316002)(3613699003)(41300700001)(7696005)(478600001)(6506007)(9686003)(966005)(53546011)(45080400002)(66899024)(55016003);
DIR:OUT; SFP:1102;
X-MS-Exchange-AntiSpam-MessageData-Original-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-Original-0: Uy+VB+2qt3hM06INLWvc90JeiLxboOWjSoN5lkdeylxJY
yzWF5oLXCbJGjFxWWSm7nkuI6mkFAhWqJnR9uVwHlJiX1
erSgml20Sihw/lVk83cANaLoHyhsKgDli2i8UV0mFIsHg
3+BH1RWSjK6R64EHFFL8SwN2cu66VtLu/pcrdCSaPpkwx
TMHeOqQ+lOQq1Ut3jHYZksQ2sxGjfuaYo18myugSbWeiZ
c2f+hZ1+VJDk1sxfS2Jt11VcjsAvG9d1OR8Kw5nrBAl5G
eG3QxAgxv+Nk3L+vox6MSROeF5QPK+6HspFK+rAznbzgV
l0vMJB8GGM5wh3gbCCM8RdxA3V4+vpqywFONv2sndeNIb
w3rYOmG2TkRtLb0aLDobFdrQ9h/exM2ZHMXkNJdgZKkaJ
nZkfTgEUjI94IecN/XaU8R6aWLtZxKgqp6Q9O2YigOwPs
s3HcogJdoeNrEp89niP5qqsqKNGILu0K+f4h9Sx5HITcm
vcRnw9NMcd5kC8sMKCQaaxhZGRS1GDsyJkf4vS7xPwqJW
MIwJ6EYDsWhMdoy3U2xRaemStvJ9Y+sR7IbiFbEUYPw6N
zP/H5mP8etUkT0XFZmhDS39QXjra6n5LQEjGkEGg3ddW1
JtJ9z9IRNHbgRKTuTcrtY16VIdi8d2CHmMVRB+pGulnuc
zpXUA90TfxrgWHaHoFFvrhTrKTIHDIh/M68pE3GWixmQW
Zc9nj0ujiwi+/IUA1AYw2grkBRtrS7jPxqQM2kTXv4ICo
7kytPnDKvgehpb31JUnQMQ0lDPGUpkj4MklcHtZQypRuB
UtaiezgYqA7iOE14hzGoJAalWjAI30csCWcFwSkYN+KtJ
5HwXeRMYJOztWCHNRgvgg+V2O925MlsfJ5TuCzB4HsRSv
2zcwwW9hM5Ndn5MjdV6eE9i0Rch1NbqClVb2XhBpy+d7M
z8fDweT1fIblnZcDrupSddJJDj4ndF1Ew8uGnal9ox3Ji
5tK24GDvJ73SBzasNQPyqOXDIGzgQ9jQDVnYzi5+65G5o
vICBUSjjLRklGydBQoDHu8eJb7CUjLtRYIW6EeDeaYsZ8
0mNdqXjlMXlLOTLk10t0KQI5Po+OJ7fazSWW93YMR6bkY
uH6cPZ6oq9Ldb73MAgNDTe72c6KjbClN2zzaKa/0Fb81u
jpmbRyWe5g6SnfxulomkCJiEm12Ow7lS8afVg7kIbHTvz
/QodfIOdmkFdZVUtPNhvHJTq8jw6N6FGWfTrW0iJroE99
nnPstWxdfanfuwKGxf6wI5mWo3VSYBPTBfD0B3zNl/YT2
9Ybs3/d539qVyn6F2j2hQ5y1ugHTk6MmXUDQpltGdQdjh
FLixTtGZQnj6DOkioBDFqFBHAv0nLt7qCV7/8PE8nc0ML
UyaburWUuSX7kfFzRUUt//HRWHfUt0zBeurFUP4OtsFOx
O8ZlHhb8C4l+0cY+d3Ovplp35qf9oHh+DaeKnljMY4NVE
RN1QzxyCvtCbgdza4wHjR+USgg2bwk4n3j3adf2OmOtRN
Tugx/8HkhLs0Upz7SQBO/BTrb072/LCtsrQbLOLxQldxq
EFPjCs1I9OIuqzRXZF/kYz3JKcPEnMlIzK9suTWF2x0y2
jA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: YT2PR01MB6093
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b:0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: DS3PEPF000099DE.namprd04.prod.outlook.com
X-MS-Exchange-Transport-CrossTenantHeadersPromoted: DS3PEPF000099DE.namprd04.prod.outlook.com
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id-Prvs: fdadf6b0-7421-4b51-311e-08dc2d9ad5ef
X-LD-Processed: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b,ExtAddr
X-MS-Exchange-AtpMessageProperties: SA
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:40.107.115.121; CTRY:CA; LANG:en; SCL:1; SRV:;
IPV:NLI; SFV:NSPM; H:CAN01-YT3-obe.outbound.protection.outlook.com;
PTR:mail-yt3can01on2121.outbound.protection.outlook.com; CAT:NONE;
SFS:(13230031)(4636009)(396003)(346002)(39860400002)(136003)(376002)(230473577357003)(230273577357003)(64100799003)(61400799015)(48200799006)(451199024)(53546011)(9686003)(7696005)(966005)(6506007)(498600001)(55016003)(66899024)(786003)(5660300002)(8676002)(2906002)(52536014)(70586007)(68406010)(86362001)(3613699003)(316002)(83320400002)(26005)(83290400002)(83280400002)(83300400002)(83380400001)(83310400002)(33656002)(110136005)(7636003)(356005)(336012);
DIR:OUT; SFP:1102;
X-ExternalRecipientOutboundConnectors: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-OriginatorOrg: mitprod.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Feb 2024 20:23:43.4247 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: e4e67582-a717-4816-b713-08dc2d9ad708
X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-AuthSource: DS3PEPF000099DE.namprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM8PR01MB7109
X-MIME-Autoconverted: from base64 to 8bit by mailman.mit.edu id 41EKNjiC3916172
X-BeenThere: kerberos@mit.edu
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: The Kerberos Authentication System Mailing List <kerberos.mit.edu>
List-Unsubscribe: <https://mailman.mit.edu/mailman/options/kerberos>,
<mailto:kerberos-request@mit.edu?subject=unsubscribe>
List-Archive: <http://mailman.mit.edu/pipermail/kerberos/>
List-Post: <mailto:kerberos@mit.edu>
List-Help: <mailto:kerberos-request@mit.edu?subject=help>
List-Subscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request@mit.edu?subject=subscribe>
X-Mailman-Original-Message-ID: <YT1PR01MB418788B7045DF1E5B375143FFA4E2@YT1PR01MB4187.CANPRD01.PROD.OUTLOOK.COM>
X-Mailman-Original-References: <YT1PR01MB4187CA8C93DE6AC8560FB1BCFA4E2@YT1PR01MB4187.CANPRD01.PROD.OUTLOOK.COM>
<YT1PR01MB418752C508C40187D7D88BC8FA4E2@YT1PR01MB4187.CANPRD01.PROD.OUTLOOK.COM>
<ba168ba8-161d-47c1-82e2-edf4cba957c7@acm.org>
 by: Brent Kimberley - Wed, 14 Feb 2024 20:23 UTC

Minor comment the CIS Benchmark appears to have been written from the system administrator's frame of reference - not the network frame of reference (FoR).
Typically, each frame of reference (FoR) needs to be audited. Hence the need for automation.

-----Original Message-----
From: Christopher D. Clausen <cclausen@acm.org>
Sent: Wednesday, February 14, 2024 2:10 PM
To: Brent Kimberley <Brent.Kimberley@Durham.ca>; kerberos@mit.edu
Subject: Re: Protocol benchmarking / auditing inquiry

[You don't often get email from cclausen@acm.org. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ]

I have used this as a guide, but I think MIT Kerberos version 1.10 is the latest available:
https://www.cisecurity.org/benchmark/mit_kerberos

Not sure if this is what you are looking for or not.

<<CDC

On 2/14/2024 11:46 AM, Brent Kimberley via Kerberos wrote:
> Preferably something smaller and more focused than nmap or OpenSCAP. 😉

> >
> From: Brent Kimberley
> Sent: Wednesday, February 14, 2024 12:44 PM
> To: kerberos@mit.edu
> Subject: Protocol benchmarking / auditing inquiry
>
> Hi.
> Can anyone point me to some methods to benchmark and/or audit Kerberos v5?
>
> For example, SSH:
> Manual
> Read the RFCs and specs.
> Semi-automatic.
> jtesta/ssh-audit: SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc) (github.com)<https://github.com/jtesta/ssh-audit/>
> Automatic
> SSH Configuration Auditor
> (ssh-audit.com)<http://ht/
> tps%3A%2F%2Fwww.ssh-audit.com%2F&data=05%7C02%7CBrent.Kimberley%40Durh
> am.ca%7C8eddde16708448e6cdb008dc2d907d49%7C52d7c9c2d54941b69b1f9da198d
> c3f16%7C0%7C0%7C638435345797172606%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4
> wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&s
> data=ydwY2y5%2FxuZxJavbNQw877yOmuFuVo3DktJr%2FdFA05A%3D&reserved=0>
>
>
> TLS example upon request.

THIS MESSAGE IS FOR THE USE OF THE INTENDED RECIPIENT(S) ONLY AND MAY CONTAIN INFORMATION THAT IS PRIVILEGED, PROPRIETARY, CONFIDENTIAL, AND/OR EXEMPT FROM DISCLOSURE UNDER ANY RELEVANT PRIVACY LEGISLATION. No rights to any privilege have been waived. If you are not the intended recipient, you are hereby notified that any review, re-transmission, dissemination, distribution, copying, conversion to hard copy, taking of action in reliance on or other use of this communication is strictly prohibited. If you are not the intended recipient and have received this message in error, please notify me by return e-mail and delete or destroy all copies of this message.

1
server_pubkey.txt

rocksolid light 0.9.8
clearnet tor