3 ms·
Sorry, I double-posted accidentally and it looks like I deleted the wrong one. I meant that layers 1-4 should not be relied upon to provide your application sec
by aaronblohowiak 15y ago
Sorry, I double-posted accidentally and it looks like I deleted the wrong one. I meant that layers 1-4 should not be relied upon to provide your application security. You are right that there are cool advances that can be worthwhile to slow down attackers, but I think that in most circumstances, you will want to make your guarantees higher up the stack*
*I am not a security expert
- deleted 15y ago[deleted]
- caf 15y agoKerberos is an attempt to push security guarantees below the application layer - applications are supposed to be able to rely on it for their security. It has been somewhat less than wildly successful.