On Mon, 09 Dec 2002 11:52:26 CST, Stephen Sprunk <ssprunk(_at_)cisco(_dot_)com>
said:
The problem I've seen repeatedly, including in an off-list discussion I'm
having about this topic, is people confusing authentication with
authorization.
Authentication: Yes, you seem to be Jeffrey Dahlmer.
Authorization: You say you'd like to borrow a steak knife?
Usually clears up the confusion in all but the most sluggish mind.. ;)
However, "authorization" usually implies "authentication" beforehand.
Does anybody have a reference on an authorization scheme that
doesn't imply any authentication?
--
Valdis Kletnieks
Computer Systems Senior Engineer
Virginia Tech
pgp8NH7UiYtX9.pgp
Description: PGP signature