Date: Thu, 28 Mar 2024 23:11:14 +0000 (UTC) Message-ID: <1478571091.7167.1711667474867@ip-10-10-7-29.ec2.internal> Subject: Exported From Confluence MIME-Version: 1.0 Content-Type: multipart/related; boundary="----=_Part_7166_1232520759.1711667474866" ------=_Part_7166_1232520759.1711667474866 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Content-Location: file:///C:/exported.html
David Walker, InCommon/Internet2
Eric Goodman, UCOP
Brian Arkills, UWash
Michael Brogan, UWash
Lee Amenya, UCSD
Mark Rank, UCSF
Ann West, InCommon/Internet2
Next Call
April 12 at Noon ET
+1-734-615-7474 PREFERRED
+1-866-411-0013
0195240#
Agenda: NASA Call summary; strategy for next steps= .
Notes
Brian - NTLM v1, verify NTLM v2 - replay, Kerbero= s - research
* NTLM v2 does address replay attacks - remove
Lee - 4.2.5.1 and 4.2.5.6 decide whether the past the h= ash fits under the criteria and is it addressed by what's in the table.&nbs= p;
Eric - Password set events to the domain controller - i= s it secure and where does it go. Subject to IdP change password.
Mark - use cases captured and risk analysis for ea= ch must be address.