Re: Authentication and Authorization

On Thu, Mar 11, 2004 at 03:58:03PM -0500, Alan DeKok wrote:
>   The set of authorization information, and the rules for when to
> apply them, is called a "policy".
>
>   e.g. "We allow employees to enter our secret lab, but not
> clients."


Only if the authorization informations and the rules are given 
by the same entity. Here the authorization information is given 
by the domain owner, the rules are given by the receiving MTA owner.




regards
Hadmut