Yeah a lot of the problems and solutions seem really foreign. Nowadays it seems you could get the same security through: Connect to auth server over TLS. E

Yeah a lot of the problems and solutions seem really foreign. Nowadays it seems you could get the same security through: Connect to auth server over TLS. Exchange password for tickets for all services. Tickets are signed messages containing (user, service, expiration time). Connect to service over TLS and present ticket.