Article View: comp.protocols.kerberos
Article #1038Re: costs of kerberos and X.500
From: Jon A. Rochlis
Date: Tue, 19 Dec 1989 20:54
Date: Tue, 19 Dec 1989 20:54
15 lines
1039 bytes
1039 bytes
$12.50/user/year for certificates means I'd be spending over 1 percent of my budget *just for authorization*. It's even worse. All you're sure of getting is "authentication" (i.e. you know who you're talking to), but not necessarily "authorization" (i.e. what you are allowed to do). You might get authorization by using certificates as capabilities, but X.509 does not address such uses. All you can count on for "sure" is authentication. If you only get authentication you still another system for managing your authorization information (e.g. Athena's Moira Service Management System). -- Jon
Technical Details
Message-ID:
<8912192054.AA29662@DELWIN.MIT.EDU>Path:
arc1-ca.pugleaf.net!utzoo!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!sun-barr!decwrl!shelby!MIT.EDU!jonReferences:
<1318@uakari.primate.wisc.edu>Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!utzoo!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!sun-barr!decwrl!shelby!MIT.EDU!jon From: jon@MIT.EDU (Jon A. Rochlis) Newsgroups: comp.protocols.kerberos Subject: Re: costs of kerberos and X.500 Message-ID: <8912192054.AA29662@DELWIN.MIT.EDU> Date: 19 Dec 89 20:54:32 GMT References: <1318@uakari.primate.wisc.edu> Sender: daemon@shelby.Stanford.EDU Organization: The Internet Lines: 15