Hacker News Reader

> Kerberos can’t survive in untrusted networks...

Wasn't Kerberos designed to work in untrusted networks?

It was, but Active Directory wasn't. If you put your DCs on the Internet you're asking to get hacked.