<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>netsekure rng &#187; Windows Authentication</title>
	<atom:link href="http://netsekure.org/tag/windows-authentication/feed/" rel="self" type="application/rss+xml" />
	<link>http://netsekure.org</link>
	<description>random noise generator</description>
	<lastBuildDate>Fri, 04 Nov 2011 19:48:48 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Pass-The-Hash vs cookie stealing</title>
		<link>http://netsekure.org/2011/11/pass-the-hash-vs-cookie-stealing/</link>
		<comments>http://netsekure.org/2011/11/pass-the-hash-vs-cookie-stealing/#comments</comments>
		<pubDate>Fri, 04 Nov 2011 19:48:48 +0000</pubDate>
		<dc:creator>Nasko</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[authentication]]></category>
		<category><![CDATA[Cookies]]></category>
		<category><![CDATA[HTTP Authentication]]></category>
		<category><![CDATA[pass-the-hash]]></category>
		<category><![CDATA[Windows Authentication]]></category>

		<guid isPermaLink="false">http://netsekure.org/?p=340</guid>
		<description><![CDATA[I saw a few talks at the BlueHat conference at Microsoft and the funniest of all was Joe McCray&#8217;s (@j0emccray) &#8220;You Spent All That Money And You Still Got Owned????&#8221;. At some point, he touched on Pass-The-Hash attacks and asked why those can&#8217;t be prevented. That struck me as an interesting question and an analogy [...]]]></description>
		<wfw:commentRss>http://netsekure.org/2011/11/pass-the-hash-vs-cookie-stealing/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Slow TLS performance with ISA</title>
		<link>http://netsekure.org/2009/06/tls-and-isa/</link>
		<comments>http://netsekure.org/2009/06/tls-and-isa/#comments</comments>
		<pubDate>Wed, 24 Jun 2009 16:19:54 +0000</pubDate>
		<dc:creator>Nasko</dc:creator>
				<category><![CDATA[Dossiers]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Client Authentication]]></category>
		<category><![CDATA[ISA]]></category>
		<category><![CDATA[SSL]]></category>
		<category><![CDATA[TLS]]></category>
		<category><![CDATA[Windows Authentication]]></category>

		<guid isPermaLink="false">http://netsekure.org/?p=72</guid>
		<description><![CDATA[A case of troubleshooting slow page loading over SSL/TLS through an ISA server.]]></description>
		<wfw:commentRss>http://netsekure.org/2009/06/tls-and-isa/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>MaxConcurrentApi</title>
		<link>http://netsekure.org/2009/04/maxconcurrentapi/</link>
		<comments>http://netsekure.org/2009/04/maxconcurrentapi/#comments</comments>
		<pubDate>Tue, 14 Apr 2009 00:39:08 +0000</pubDate>
		<dc:creator>Nasko</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Netlogon]]></category>
		<category><![CDATA[NTLM]]></category>
		<category><![CDATA[Windows Authentication]]></category>

		<guid isPermaLink="false">http://netsekure.org/?p=65</guid>
		<description><![CDATA[One of the hard things to troubleshoot in Windows domains is NTLM authentication and the interesting MaxConcurrentAPI setting. When user account to be authenticated on the server does not belong to the local account database, the server must forward the authentication to a domain controller. It does so over the Netlogon secure channel. As such, it is [...]]]></description>
		<wfw:commentRss>http://netsekure.org/2009/04/maxconcurrentapi/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

