[849] in Kerberos
Re: costs of kerberos and X.500
daemon@ATHENA.MIT.EDU (Jon A. Rochlis)
Tue Dec 19 16:06:20 1989
From: jon@MIT.EDU (Jon A. Rochlis)
To: zaphod.mps.ohio-state.edu!uakari.primate.wisc.edu!bin@ohio-state.arp,
Cc: kerberos@ATHENA.MIT.EDU
In-Reply-To: Your message of 19 Dec 89 15:49:42 +0000.
$12.50/user/year for
certificates means I'd be spending over 1 percent of my budget *just for
authorization*.
It's even worse. All you're sure of getting is "authentication" (i.e.
you know who you're talking to), but not necessarily "authorization"
(i.e. what you are allowed to do). You might get authorization by
using certificates as capabilities, but X.509 does not address such
uses. All you can count on for "sure" is authentication. If you only
get authentication you still another system for managing your
authorization information (e.g. Athena's Moira Service Management
System).
-- Jon
