Subject: pkinit, kdc certificate ?

From: Love <[email-masked]>
Date: Wed, 21 Apr 2004 17:57:36 +0200

How does the client verify its the kdc that signed the reply and not
someone else ?

Love