3 ms·

It's basically Kerberos and an LDAP server, which are technologies old and reliable as dirt. This sort of FUD is why people needlessly spend so much money on c

• noprocrasted 2y ago
  > which are technologies old and reliable as dirt. Technologies, sure. Implementations? Not so much. I can trust OpenSSH because it's deployed everywhere and I can be confident all the low-hanging fruits are gone by now, and if not, its widespreadness means I'm unlikely to be the most interesting target, so I am more likely to escape a potential zero-day unscathed. What't the marketshare of IPA in comparison? Has it seen any meaningful action in the last decade years, and the same attention, from both white-hats (audits, pentesting, etc) as well as black-hats (trying to break into every exposed service)? I very much doubt it, so the safe thing to assume is that it's nowhere as bulletproof as OpenSSH and that it's more likely for a dedicated attacker to find a vuln there.
  • dpe82 2y ago
    MIT's Kerberos 5 implementation is 30 years old and has been very widely deployed.