[pubcookie-dev] no assembly required?

Nathan Dors dors at cac.washington.edu
Thu Sep 2 14:34:37 PDT 2004


>  Note that, while the login server will break a too-long credential
>  into component parts, the module has never been programmed to
>  assemble such parts.  I did not improve that, as the K5 credential
>  is only about 500 bytes and the block size is about 3900 bytes.

Maybe K5 service tickets are small while TGT's are large. Thus,
sending a service ticket to the module requires no chunking,
whereas sending the TGT back to oneself (via a cookie scoped to
the login server) requires chunking.

I can't think of any other reason this would be so. Thanks for the
note.

-Nathan


More information about the pubcookie-dev mailing list