[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Some SACRED blasphemy



% 
% SACRED persons, I hope that I may be forgiven a minor blasphemy ....
% 
% Both the SACRED requirements document and the SACRED framework document make reference to
% "entities" that use credentials.  In reading through the documents though, they seem to be
% making the assumption that an entity is a "user" who wants to make the credentials
% that are available to her in the context of some device environment, also available to
% her in a different device environment.
% 

And I always thought that processes create/consume credentials, not people or devices.
People generate (seeds/salt/tokens/secrets) and processes in devices work on that input to 
generate/store/move/display/consume the results, which I think of as credentials. 

-- 
--bill