> I've never seen last one in real life, maybe it has some critical flaws I am failing to see? Doesn't Kerberos solve this with s4u2self and s4u2proxy and othe

> I've never seen last one in real life, maybe it has some critical flaws I am failing to see? Doesn't Kerberos solve this with s4u2self and s4u2proxy and other delegated credentials? I'll admit it isn't quite the exact same, but the general idea is the same.