AOL 6.0 protocol changes...

[John Bailey]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jeff Connelly wrote:
>> 2. What is "krbtgt"?  Is that another screen name?  It appears in there a few
>> times.  Maybe the actual conversation data itself is encrypted, but the
>> framing data surrounding the conversation isn't?
> krbtgt = Kerberos Ticket-Granting Ticket?
> 
> http://www.cmf.nrl.navy.mil/CCS/people/kenh/kerberos-faq.html#tgttgs
> says "When a user first authenticates to Kerberos, he talks to the
> Authentication Service on the KDC to get a Ticket Granting Ticket.
> This ticket is encrypted with the user's password."
> 
> The terminology seems to fit the acronyms seen here - perhaps AIM6
> uses Kerberos for authentication in some way.

This is indeed a sign of Kerberos-based authentication, as is the
kdc.uas.aol.com hostname.  I would bet that AOL is using Kerberos 5 here instead
of the older Kerberos 4 which appears to be used for our Zephyr support.

John
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFG5Bs2BWJH/emdNtsRAl34AJ9mtS0giZ1DMFGp6zgMjRusO0zEcQCgmNNj
7Otp00PqZUbw9VsfroXnwHw=
=csov
-----END PGP SIGNATURE-----