[246] in WWW Security List Archive
Re: info on proposed SSL protocol and Netscape implementation
daemon@ATHENA.MIT.EDU (Paul Leach)
Tue Nov 29 19:28:56 1994
From: Paul Leach <paulle@microsoft.com>
To: www-security@ns1.rutgers.edu, zurko@osf.org
Date: Tue, 29 Nov 94 10:26:51 TZ
Cc: hallam@dxal18.cern.ch
Reply-To: Paul Leach <paulle@microsoft.com>
|
| Aren't you being a little ambiguous in saying that "security"
| occurs at the transport layer? Actually, _authentication_
| (via ACLs) is done at the (RPC) transport layer, and
| _authorization_ is done at the application layer.
Oops -- fingers slipped -- ACls are not authentication, they're
authorization. I put the parenthesized comment after the wrong "auth" word.
Paul
