Kerberos Timestamp

Question

Could anyone please explain how timestamps in Kerberos protect from Replay attacks?

Thanks

Answer 1

It doesn't fully prevent replay attacks, but it ensures that a replay must happen within a few minutes of authentication. If you try to replay the authentication handshake hours later, it'll fail because the server knows the timestamp is way old.