we need to know -> it is important to understand

This commit is contained in:
Christopher Lemmer Webber 2019-07-18 22:44:32 -04:00
parent c905ded7bc
commit a8b18a6c09
No known key found for this signature in database
GPG Key ID: 4BC025925FF8F4D3

View File

@ -544,9 +544,9 @@ to be able to sensibly trust their computing systems in this modern
age.
To be sure, we need authentication when it is important to know that a
certain entity "said a particular thing", but we need to know that
this is not the same as knowing whether a particular entity "can do a
certain thing".
certain entity "said a particular thing", but it is important to
understand that this is not the same as knowing whether a particular
entity "can do a certain thing".
Mixing up authentication with authorization is how we get ACLs,
and ACLs have serious problems.