First page Back Continue Last page Overview Graphics
Kerberos’ Stateless Model
TGS does not send {Kc,s}Ks to S directly. Instead, TGS sends {Tc,s}Ks, with Tc,s containing Kc,s, to C and let C forward it to S
- Otherwise, S would need to keep state, i.e., keep received Kc,s around, and this would complicate implementation
In general, servers do not talk to each other directly. Clients initialize transactions and complete them
This stateless model is simple and elegant