Tickets (cont.)

The TGS seals (encrypts) each ticket with the secret encryption key of the server.
Sealed tickets can be sent safely over a network - only the server can make sense out of it.
Each ticket has a limited lifetime (a few hours).