 |
 |
On Apr 9, 2008, at 3:04 PM, Joe Budzyn wrote: > It is strongly recommended that any authentication be encrypted. > The preferred > method of authentication is through Sentinel. An alternative method > for > authentication that is becoming more popular is Shibboleth. > > SSL encryption does not prevent a man-in-the-middle attack if the > web site > is recording the user name and password. > > It is a good idea to ensure MSU netid authenticated web applications > use SSL encryption. However, some web applications can not use SSL > for > technical reasons. As a point of clarification, Shibboleth is integrated with Sentinel (which uses kerberos), so if you integrate with Shibboleth, you get the Sentinel action as well. Kerberos ticket passing is also a fantastic and secure way to utilize our krb AuthN solution. ./mk -- Matt Kolb <[log in to unmask]> Academic Technology Services Michigan State University