Microsoft joins MIT's Kerberos Consortium

Top Stories

Related

• Clues point to Jan. 13 release of Windows 7 beta
• Microsoft releases Vista SP2 beta
• Obama's DHS pick may find support for raising H-1B cap at confirmation hearing
• IBM wants info from Apple execs in Papermaster case
• License server glitch exposes SonicWall users to e-mail security threats
• Report: Former AOL chief exec tries to raise funds to buy Yahoo

• Clues point to Jan. 13 release of Windows 7 beta
• Microsoft releases Vista SP2 beta
• Microsoft adds more Web 2.0 features to Windows Live
• Bad week for Microsoft. Browsers, OS and Boxes
• What Ballmer should say in the Vista "Junk PC" suit

Zone

The Security Zone With the mobility of employees and the ease with which external devices can be brought in and out of a network, continuing to build your security plan for network servers and clients is a must. Fortunately, there is much that organizations can do to protect themselves from attacks - internal and external. Having the right policies, procedures and server configurations is critical... Learn more in The Security Zone See All Zones

April 1, 2008 (IDG News Service) Microsoft Corp. has joined the executive board of MIT's Kerberos Consortium, an organization that oversees development of the widely used network authentication standard. Rivals Apple Inc., Google Inc. and Sun Microsystems Inc. are also on the board.

The Kerberos suite of authentication protocols, which runs on most operating systems, can enable security features such as single sign-on, where a single log-in and password can be used to access multiple Web sites or applications. The protocols were developed as part of MIT's Project Athena in the 1980s.

Microsoft has implemented the Kerberos protocols in its Windows 2000, XP, Server 2003 and 2008, and Vista operating systems, but it has also been accused of subverting the standard by adding proprietary extensions.

During Microsoft's U.S. antitrust trial that began in 1998, an MIT professor testified that the vendor had extended the Kerberos specification in Windows 2000 so that a non-Microsoft server could not use the operating system's security features. That evidence contributed to the view that Microsoft gave lip service to interoperability while implementing technical blocks to lock out competitors. Microsoft eventually released details on its modifications to Kerberos.

After antitrust trials in both the U.S. and Europe over the past decade, Microsoft took steps both under court order and voluntarily to improve its documentation of protocols and to open up more of its internal technical details.

Microsoft's participation in the Kerberos Consortium "shows Microsoft's continued and growing desire as of late to work with the open-source community and industry consortiums around interoperability," Tom Kemp, CEO of security software vendor Centrify Corp., noted on his blog.

Centrify, a Microsoft partner, makes software called DirectControl that lets servers, workstations and devices from other vendors use Active Directory, which is Microsoft's authentication and provisioning technology. Authentication is accomplished using Kerberos, Kemp wrote.

Even while embroiling itself in controversy, Microsoft has also made use of Kerberos more widespread through its involvement with the protocol, Kemp wrote.

"As we all know, there are many out there that like to beat up Microsoft regarding security, but it is ironic that Microsoft by default delivers the added security of Kerberos as part and parcel of the Windows platform," Kemp wrote.

Reprinted with permission from

IDG.net
Story copyright 2008 International Data Group. All rights reserved.