[planetary-exit]

TL;DR:

• Microsoft is deprecating all versions of NTLM in favour of Kerberos / Negotiate; it's probably still going to work for a few years because of backcompat concerns;
  
• NTLM will still work in the next Windows Server release, as well as the next annual Windows release;
  
• Admin guidance for now is to start auditing NTLM use to then eliminate it;
  
• Once enough people migrate to Kerberos, Microsoft will probably disable it for good, thus finally killing a vulnerability from 1997(!)
  

Original sources:
https://techcommunity.microsoft.com/t5/windows-it-pro-blog/the-evolution-of-windows-authentication/ba-p/3926848
https://www.bleepingcomputer.com/news/mi...-protocol/

[fluffybear]

It's about time.

[antal]

very interesting

[redleaks1]

Goodby NTLM and Hello Recall

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[b090134565312]

Goodby NTLM and Hello Recall

I know right. One step forward, two steps back. Microsoft, SMH.