<html>
<body>
<font size=3>Kerberos does not assume clock synchronization.<br>
Kerberos requires reasonable clock synchronization.<br>
And, as near as I can tell, clock synchronization is not part of the
Kerberos protocol.<br><br>
Kick me if I err in this.<br><br>
<x-tab> </x-tab>Cutler<br>
<br>
At 9/19/2007 08:14 AM -0400, Jeff McAdams wrote:<br>
Stephen Sprunk wrote:<br>
>> ... is it reasonable to assume clock synchronization in the
rest<br>
>> of our design?<br><br>
> In general, it is not. I can't think of any existing protocol
that<br>
> does, actually.<br><br>
Kerberos.<br>
-- <br>
Jeff McAdams<br>
"They that can give up essential liberty to obtain a<br>
little temporary safety deserve neither liberty nor safety."<br>
-- Benjamin Franklin<br><br>
<br><br>
</font><x-sigsep><p></x-sigsep>
<font face="Courier, Courier" size=3>-<br>
James R. Cutler<br>
james.cutler@consultant.com<br>
</font></body>
</html>