Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <F8091E24-C968-4BA8-9C24-AA797FB89D66@goldmark.org>
Date: Wed, 20 Dec 2017 09:47:32 -0600
From: Jeffrey Goldberg <jeffrey@...dmark.org>
To: passwords@...ts.openwall.com
Subject: Re: Authentication vs identification

On Dec 20, 2017, at 12:16 AM, e@...tmx.net wrote:

> i do not have an issue with your views on auth and ID,
> (besides them being a little prolix for my taste)
> i want to EMPHASIZE the characteristic difference between the two in question. because some of this list's subscribers had claimed (a while ago) that there is no difference between auth and ID whatsoever.

Ah. I’m sorry. I missed that context, and I misunderstood what you were trying to do. I apologize.

Although we probably do have some points of disagreement, I think that we both agree that

1. Identification and authentication, while often done together, are different distinct things.
2. A failure to understand the distinction has led to some truly terrible authentication practices.

Cheers,

-j



Download attachment "smime.p7s" of type "application/pkcs7-signature" (3367 bytes)

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.