Tag Info

New answers tagged

0

Google for Amazon cookie management. Authentication is only valid for a certain period of time, and once it expires they will not let you perform critical operations without going through it again. That is they first check if your "low quality" identity is authorized to perform an operation, and otherwise ask you to authenticate again to obtain a "strong ...


0

You are actually bringing about a very interesting point. Instead of just seeing authentication as proving your identity (the fact that you are indeed Bob), see authentication in a broader sense whereby your prove the authenticity of a claim. For instance, you could claim to be 21 years of age, you could claim to be an EU citizen, or you could claim to ...


0

I guess what is really confusing about this is that it goes against the typical way things are done. But if you want to break it down, let's look at the ways you've proposed. Authentication then Authorization This way, a user must prove they are who they say they are (in this case with a username and password, and once they do, the session is authorized ...


2

I have seen systems that filter by a list of allowed IP addresses first, so in order to even attempt to use an authentication method you have to be coming from a specified IP address or range. This is similar to what you are describing. But in general, authorization refers to deciding what an authenticated user can do, and so logically comes after the ...


1

What you are describing is, in fact, authentication. It is just a more explicit description of the steps involved in authenticating than you might generally see. Specifically, the steps in the authentication process are identification, and authentication. First you get an identifier (such as a username) and if it is a valid identifier and can be matched ...


0

There are the three major components of security: Confidentiality, Integrity, Availability. This triad is as inviolate as the fire triangle (heat, fuel, oxygen). The concepts you (@Tri.Bao) are asking about go to both Confidentiality and Availability. Authentication is merely the term to express the concept, "You are who you say you are." It is the first ...



Top 50 recent answers are included