Public Key Utilizing Tickets for Application Servers (PKTAPP)

Document Type Expired Internet-Draft (krb-wg WG)
Authors Ari Medvinsky  , Matt Hur  , Alexander Medvinsky  , Clifford Neuman 
Last updated 2000-11-13
Stream Internet Engineering Task Force (IETF)
Intended RFC status (None)
Expired & archived
pdf htmlized (tools) htmlized bibtex
Stream WG state Dead WG Document
Document shepherd No shepherd assigned
IESG IESG state Expired
Consensus Boilerplate Unknown
Telechat date
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft can be found at


Public key based Kerberos for Distributed Authentication[1], (PKDA) proposed by Sirbu & Chuang, describes PK based authentication that eliminates the use of a centralized key distribution center while retaining the advantages of Kerberos tickets. This draft describes how, without any modification, the PKINIT specification[2] may be used to implement the ideas introduced in PKDA. The benefit is that only a single PK Kerberos extension is needed to address the goals of PKINIT & PKDA.


Ari Medvinsky (
Matt Hur (
Alexander Medvinsky (
Clifford Neuman (

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)