When you want to associate multiple domains into the same profile, using
just the password isn't enough, since we'd have to ensure any password
that's previously used (and isn't *your* profile) isn't duplicated.

And for security reasons, if we use just domain/password, there's already
one public piece of information for access to the domain.  With a username
it's a higher level of security (through obscurity)

Charles Daminato
OpenSRS Product Manager
Tucows Inc. - [EMAIL PROTECTED]

> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On
> Behalf Of Fagyal Csongor
> Sent: March 13, 2002 9:44 AM
> To: Frank Michlick; klaus rubba; [EMAIL PROTECTED]
> Subject: Re: reg_username and reg_password
>
>
>
>
> > Klaus,
> >
> > the username/password are not unique, the domain name is the unique
> identifier
> > used in our systems. So the same username can be used several times on
> different
> Why is there a password then, if profiles are made of
> domain/username/password triples?
>
> Please show me an example where a domain/password pair is not enough.
>
> - Cs.
>
>
>

Reply via email to