> > I'm unclear what distinction you're drawing between "identify" and > "authenticate." "I am who I say I am," is the sum total of > authentication. Everything beyond that gets into authorization.
"I am FOO." = Identification "This is proof I am FOO" = Authentication On Sun, May 18, 2025 at 11:28 AM William Herrin via NANOG < [email protected]> wrote: > On Sun, May 18, 2025 at 8:02 AM brent saner via NANOG > <[email protected]> wrote: > >Transports in SMTP do not authenticate, they identify (if at all). > > Hi Brent, > > I'm unclear what distinction you're drawing between "identify" and > "authenticate." "I am who I say I am," is the sum total of > authentication. Everything beyond that gets into authorization. > > Which now that I think about it sounds a lot like there's a layer > violation in giving TLS certificates a "for this purpose" tag at all. > I knew there was a reason I didn't like it but I was having trouble > putting my finger on it. > > Regards, > Bill Herrin > > -- > William Herrin > [email protected] > https://bill.herrin.us/ > _______________________________________________ > NANOG mailing list > > https://lists.nanog.org/archives/list/[email protected]/message/JSL25WHJS7VTMKC6HD2CTBW6IN64XWFZ/ _______________________________________________ NANOG mailing list https://lists.nanog.org/archives/list/[email protected]/message/WHH7OCEG5DXFVSQNRKOTAEOPSHZ62PAY/
