Quote:
Originally Posted by gkbsd
Thanks for your comments
Guillaume
|
Thank you for this
Quote:
Originally Posted by "gkbsd
|
post on FreeBSD forum. I was aware of the big PF thread last Summer but I was not aware of the other discussions.
On the security related note I was working over the weekend on Kerberos and AFS (Andrew File System). As many of you know Kerberos (actually its international/Swedish implementation Heimdal) has been moved from OpenBSD base to ports due to the lack of men power to properly clean this complicated protocol used by few. Kerberos support was removed from LibreSSL as well. Arla (AFS) has been removed long time ago due in part to political reason (Theo refused to use the name of the company Arla for the file system). With OpenAFS port stuck at 1.4.something (current release is 1.6.10) and compiling only on i386 OpenBSD has no AFS support to speak of.
All of above is very appealing to security conscious but not very practical in real life at least at my work place. For the record FreeBSD has great support for both Kerberos and OpenAFS.