Which of the following safeguards Kerberos from replay attacks?
Kerberos authenticators include time stamps that servers validate against an allowed clock-skew window. This limits the period in which an intercepted authentication request could be reused and enables replayed requests to be rejected.
Community Discussion