From a8b18a6c091b6001f36acc67e1156165272c9998 Mon Sep 17 00:00:00 2001 From: Christopher Lemmer Webber Date: Thu, 18 Jul 2019 22:44:32 -0400 Subject: [PATCH] we need to know -> it is important to understand --- README.org | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/README.org b/README.org index 942383f..232e1c5 100644 --- a/README.org +++ b/README.org @@ -544,9 +544,9 @@ to be able to sensibly trust their computing systems in this modern age. To be sure, we need authentication when it is important to know that a -certain entity "said a particular thing", but we need to know that -this is not the same as knowing whether a particular entity "can do a -certain thing". +certain entity "said a particular thing", but it is important to +understand that this is not the same as knowing whether a particular +entity "can do a certain thing". Mixing up authentication with authorization is how we get ACLs, and ACLs have serious problems.