Extra Mitigation Curation

Spoofing attack due to unvalidated KDC This module does not validate the KDC, which might allow an attacker with network access and enough time to spoof the KDC and impersonate a valid user without knowing their credentials.