Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 15 Dec 2017 16:49:23 +0100
From: "e@...tmx.net" <e@...tmx.net>
To: passwords@...ts.openwall.com
Subject: Re: Authentication vs identification

On 12/15/2017 04:44 PM, Matlink wrote:
> Basically:
> 
> Authentification is verifying 

by the user himself
(i prefer to make definitions precise, which voice is active and which 
is passive)

> that an user is really the one she's
> pretending to be (i.e. by asking for a password).


> Identification is trying to put an identity on someone, like her name is
> Alice Smith from London (or less precisely by tracking her across websites).

in other words "THEY DO IT TO YOU"
with or without your consent,
although you need them to do it to you for your benefit quite often.


> Le 15/12/2017 à 16:32, Alex Smirnoff a écrit :
>> It confuses me as well. Isn't it exactly the opposite? Identification
>> involves a person, and authentication involves abstract "entity" which
>> could be non-person, group of people or whatever.
>>
>> On Fri, Nov 24, 2017 at 09:29:16AM +0100, Eugene Panferov wrote:
>>> it dawned on me recently, the difference between the two is easy to grasp
>>> and easy to formulate:
>>>
>>> You do want exactly one man to be capable of authentication.
>>> You do want multiple men to be capable of identification.
> 

Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.