Security most common practice

  • Thread starter Thread starter Ben
  • Start date Start date
B

Ben

Hi,
I am developing an embedded application for a device that needs to
connect to an AD server.

I have read that the first handshake to log in into AD can be:
- not encrypted
- encrypted with Kerberos
- encrypted with SSL
Is this correct? If so, what is the most common practice in a normal PC
environment, for a company intranet ?

Many thanks,
Ben
 
The most common practice I would probably say is to do a serverless
bind using Kerberos. You can do LDAP/SSL (port 636) but this requires a
certificate.
 
Back
Top