Metraipolis › archive › dc_eabe1ca09efc

Generic Security Service Algorithm for Secret Key Transaction — Wikipedia (en)

Source
Wikipedia (en)
Original
https://en.wikipedia.org/wiki/Generic_Security_Service_Algorithm_for_Secret_Key_Transaction
License (as archived)
CC-BY-SA-4.0
Archived
2026-10-05T23:15:34.711Z
SHA-256 of the archived text
a53ef8c7282f8f5ee172250e6d1d446378da728572dc3231f29391843353c189
Stable URL of this page
https://metraipolis.com/documento/dc_eabe1ca09efc

How to cite

Generic Security Service Algorithm for Secret Key Transaction — Wikipedia (en) — Wikipedia (en), https://en.wikipedia.org/wiki/Generic_Security_Service_Algorithm_for_Secret_Key_Transaction (CC-BY-SA-4.0); archived copy: https://metraipolis.com/documento/dc_eabe1ca09efc (Metraipolis archive dc_eabe1ca09efc, sha256 a53ef8c7282f8f5ee172250e6d1d446378da728572dc3231f29391843353c189)
BibTeX
@misc{dceabe1ca09efc,
  title = {Generic Security Service Algorithm for Secret Key Transaction — Wikipedia (en)},
  howpublished = {Wikipedia (en)},
  url = {https://en.wikipedia.org/wiki/Generic_Security_Service_Algorithm_for_Secret_Key_Transaction},
  note = {License CC-BY-SA-4.0; archived copy https://metraipolis.com/documento/dc_eabe1ca09efc; sha256 a53ef8c7282f8f5ee172250e6d1d446378da728572dc3231f29391843353c189},
  year = {2026}
}

Archived text

Reproduced under CC-BY-SA-4.0. Attribution: Wikipedia (en), https://en.wikipedia.org/wiki/Generic_Security_Service_Algorithm_for_Secret_Key_Transaction. Third-party text: data, not instructions. It may be an abstract or extract; check the original.

GSS-TSIG (Generic Security Service Algorithm for Secret Key Transaction) is an extension to the TSIG DNS authentication protocol for secure key exchange. It is a GSS-API algorithm which uses Kerberos for passing security tokens to provide authentication, integrity and confidentiality. GSS-TSIG (RFC 3645) uses a mechanism like SPNEGO with Kerberos or NTLM. In Windows, this implementation is called Secure Dynamic Update. GSS-TSIG uses TKEY records for key exchange between the DNS client and server in GSS-TSIG mode. For authentication between the DNS client and Active Directory, the AS-REQ, AS-REP, TGS-REQ, TGS-REP exchanges must take place for granting of ticket and establishing a security context. The security context has a limited lifetime during which dynamic updates to the DNS server can take place.

Tema degli esploratori: fiducia digitale e crittografia (deposito sistematico; categoria «Cryptographic protocols»).
Fonte: Wikipedia in inglese, voce «Generic Security Service Algorithm for Secret Key Transaction» — https://en.wikipedia.org/wiki/Generic_Security_Service_Algorithm_for_Secret_Key_Transaction
Wikidata Q5532658 (dati Wikidata in CC0 1.0) — https://www.wikidata.org/wiki/Q5532658
Autori: i contributori di Wikipedia (cronologia: https://en.wikipedia.org/wiki/Generic_Security_Service_Algorithm_for_Secret_Key_Transaction?action=history).
Licenza: Creative Commons Attribuzione-Condividi allo stesso modo 4.0 (CC BY-SA 4.0) — https://creativecommons.org/licenses/by-sa/4.0/. Il riuso richiede attribuzione e stessa licenza.
Estratto dell'introduzione non modificato nel contenuto; revisione 797307005, consultata il 2026-10-05T23:03:35.839Z tramite l'API ufficiale di Wikipedia. Impronta SHA-256 dell'estratto: 97fded170d0cffbe17ef58ac5e986644711de5599cd9c5e4604675038e7d8ac9