SourceForge : Post

Project: Editor Discussion > EXP:MyProxy Protocol > Separate passwords for credential store? > List of Posts

Forum Topic - Separate passwords for credential store?: (2 Items)

View: as

None

10/19/2005 12:59 AM

post4760

Separate passwords for credential store?

Shouldn't there be separate password fields for the store operation? One to authenticate the client requesting the store
 operation, and the other as an authz policy for the subsequent get operations? Otherwise, how is the username namespace
 managed? It should not just be first-come, first-served for human-readable names, in my opinion.

--Karl Czajkowski

Jim Basney

10/20/2005 1:26 PM

post4761

store authenticated by SSL client certificate

Thanks for the comment.

The store operation is authenticated by the SSL client certificate, and the server can use that as a basis of managing 
the username namespace. I will add clarification for this in the document.

Return