News for hackers. Stuff that matters.

A comment on Kerberoasting. Parent comment

Re:Kerberoasting by kstrauser on Wednesday September 10, 2025 @03:14PM (#45202313)
It’s been ages since I stood up a Kerberos realm, but… would it be possible to allow RC4 only for specific users? Like encrypt [email protected]’s heavily locked down account with RC4, but everyone else gets AES-256?
[ Parent | on HN ]
Re:Kerberoasting by spydum on Wednesday September 10, 2025 @05:57PM (#45204525)
Yes you can enable specific encryption types for users. It's not super common, but it can be done.
[ Parent | on HN ]