[cap-talk] FW: MIT Launches Kerberos Consortium

Fri Sep 28 17:42:21 EDT 2007

I believe that Kerberos authorizations are close enough to capabilities
to be interesting.  However, they're almost never used that way.  (See
the comment about Single Sign On below.)  Perhaps this Consortium is a
chance to change that.  Anybody care to sign up?

________________________
Alan Karp
Principal Scientist
Virus Safe Computing Initiative
Hewlett-Packard Laboratories
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
https://ecardfile.com/id/Alan_Karp
http://www.hpl.hp.com/personal/Alan_Karp

________________________________

From: Stephen Buckley [mailto:sbuckley at mit.edu] 
Sent: Wednesday, September 26, 2007 9:11 PM
To: Karp, Alan H
Subject: MIT Launches Kerberos Consortium

Kerberos<http://origin.ih.constantcontact.com/fs072/1011219684162/img/27
.jpg?a=1101824851604> 	
MIT Launches Kerberos Consortium

MIT Launches Kerberos Consortium 

Will build on MIT strengths and technologies to seek new solutions for
protecting consumers and mobile devices. 
Kerberos
<http://rs6.net/tn.jsp?t=uu4b5ecab.0.o4ds5ecab.c9whwyn6.1078&ts=S0275&p=
http%3A%2F%2Fwww.kerberos.org%2F> 
Cambridge, Mass., Sept. 27 - MIT today announced the launch of the
Kerberos Consortium, embarking on an ambitious mission to create a
universal authentication platform to protect the world's computer
networks. 

MIT also announced today that Centrify Corporation, the Financial
Services Technology Consortium, Google, Stanford University, Sun
Microsystems, TeamF1, and the University of Michigan are founding
sponsors of the Consortium.  The Consortium also will receive generous
support from Apple.

Kerberos is a network authentication protocol, originally developed for
MIT's Project Athena in the 1980s. Over the past two decades, it has
grown to become the most widely deployed system for authentication and
authorization in modern computer networks. However, it is currently
mostly available only in large corporate networks.  Kerberos' ability to
require strong mutual authentication has enormous potential to protect
consumers doing business on the public Internet from phishing and other
types of attacks.

"By establishing the Kerberos Consortium, MIT seeks to permit Kerberos
to continue to grow and develop as a stable and universal 'single
sign-on' mechanism for the users of modern computer networks," said
Stephen Buckley, executive director of the Kerberos Consortium.  "The
Consortium will provide a mechanism to permit greater industry
participation in the funding and development of Kerberos, and thus allow
it to evolve into the universal 'single sign-on mechanism' users need
but do not yet have."

"We foresee a day when Kerberos-based authentication and authorization
will be as ubiquitous as TCP/IP-based networking itself," said Sam
Hartman, chief technologist for the Kerberos Consortium. "We want to
make Kerberos more useful and available than ever before."

As an example, Hartman noted that if Kerberos were available on mobile
devices, it would be more attractive in the health care industry as a
mechanism for securing privacy of health records. If made available for
consumers, it could make electronic commerce less susceptible to
phishing and identity theft.

"We see a number of our customers asking for open source, stable and
interoperable single-sign on technology, based on the Kerberos protocol"
said Kathy Jenks, Director, Sun Microsystems. "The MIT Kerberos
Consortium is an outstanding way to address our customers' requirements.
It's also a continuation of the work we have been doing within the
Kerberos community over the last several years, including contribution
of key technologies such as SPNEGO and LDAP-based Kerberos data
storage."

"The bright future for Kerberos depends on our ability to standardize
the technologies layered above Kerberos -- hence the need for an
organization like the Kerberos Consortium," said Clifford Neuman,
director of the USC Center for Computer Systems Security, and the
original principal designer of Kerberos.  "I am delighted to see
industry, academia, and the business community coming together to
promote the growth of Kerberos into new areas."

The Consortium will perform software development and the documentation
activities necessary to achieve its goal of ubiquitous support for
Kerberos-based single sign-on solutions across all aspects of the
world's communication infrastructure.

A primary objective of the Consortium is to implement the solutions it
promotes in the form of open source reference implementations that can
be used by Consortium members within their products and organizations
without licensing fees.

Live Web Cast of Launch Event, Sept. 27
<http://www.kerberos.org/images/logo_kerberos.gif> 
The Launch Event for the MIT Kerberos Consortium will be held at 9:30 AM
EDT on September 27th, at MIT's Stata Center.  It will webcast live and
an archive made available shortly thereafter.

Click Here to View The Live Web Cast (Requires Real Player)
<http://rs6.net/tn.jsp?t=uu4b5ecab.0.p4ds5ecab.c9whwyn6.1078&ts=S0275&p=
http%3A%2F%2Fweb.mit.edu%2Fwebcast%2Fkerberos_consortium%2F2007%2Fmit-ke
rberos_consortium-27sep2007-220k.ram>  

About MIT Kerberos Consortium
The MIT Kerberos Consortium was created to establish Kerberos as the
universal authentication platform for the world's computer networks.
Building upon the existing Kerberos protocol suite, the Consortium will
develop interoperable technologies  to enable organizations and
federated realms of organizations to use Kerberos as the single sign-on
solution for access to all applications and services. It will also
promote the adoption of these technologies so that ultimately all
operating systems, applications, imbedded devices, and Internet based
services can utilize Kerberos for authentication and authorization. 	
For More Information Contact
Stephen C. Buckley
Executive Director
MIT Kerberos Consortium
1 617.324.9167
sbuckley at mit.edu

Quick Links
Kerberos Consortium Website
<http://rs6.net/tn.jsp?t=uu4b5ecab.0.o4ds5ecab.c9whwyn6.1078&ts=S0275&p=
http%3A%2F%2Fwww.kerberos.org%2F> 
Video of Launch
<http://rs6.net/tn.jsp?t=uu4b5ecab.0.p4ds5ecab.c9whwyn6.1078&ts=S0275&p=
http%3A%2F%2Fweb.mit.edu%2Fwebcast%2Fkerberos_consortium%2F2007%2Fmit-ke
rberos_consortium-27sep2007-220k.ram> 
Questions and Answsers
<http://rs6.net/tn.jsp?t=uu4b5ecab.0.npdcn9bab.c9whwyn6.1078&ts=S0275&p=
http%3A%2F%2Fdigital.mit.edu> 
More About Us
<http://rs6.net/tn.jsp?t=uu4b5ecab.0.q4ds5ecab.c9whwyn6.1078&ts=S0275&p=
http%3A%2F%2Fwww.kerberos.org%2Fabout%2Findex.html> 
MIT Kerberos Consortium
Stephen c. Buckley
Executive Director
1 617.324.9167
sbuckley at mit.edu

Forward email
<http://ui.constantcontact.com/sa/fwtf.jsp?m=1011219684162&ea=alan_karp%
40hp.com&a=1101824851604> 

<http://visitor.constantcontact.com/d.jsp?p=un&m=1011219684162&se=1078&t
=1101824851604&lang=en&reason=F>  
This email was sent to alan_karp at hp.com, by sbuckley at mit.edu
Update Profile/Email Address
<http://visitor.constantcontact.com/d.jsp?p=oo&m=1011219684162&se=1078&t
=1101824851604&lang=en&reason=F>  | Instant removal with SafeUnsubscribe
<http://visitor.constantcontact.com/d.jsp?p=un&m=1011219684162&se=1078&t
=1101824851604&lang=en&reason=F> (tm) | Privacy Policy
<http://ui.constantcontact.com/roving/CCPrivacyPolicy.jsp> .
Email Marketing
<http://www.constantcontact.com/home.jsp?pn=provenio&cc=press03>  by
 <http://www.constantcontact.com/home.jsp?pn=provenio&cc=press03>  
MIT Center Kerberos Consortium | 77 Massachusetts Avenue | W92-159 |
Cambridge | MA | 02139

<http://rs6.net/on.jsp?t=1101824851604.0.1011219684162.1078&ts=S0275&o=h
ttp://ui.constantcontact.com/images1/s.gif> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.eros-os.org/pipermail/cap-talk/attachments/20070928/0e94413f/attachment-0001.html 