On Tuesday, Apr 1, 2003, at 11:56 US/Eastern, Chuq Von Rospach wrote:
as a friend of mine who's a computer security expert keeps reminding
me, authentication is not authorization.
Correct, and furthermore identification is not the same as either
authentication or authorization.
This is why SSNs are such a problem. People try to use an
identification number for authentication and authorization.
mathew
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg