Re: Outreach via wikipedia articles on authentication and authorization

2013/8/7 Dirk Pranke <[email protected]>:
> Continuing your example, if I steal your car keys and drive off in your car,
> the car might "think" I was authorized, but you (and most people) probably
> wouldn't?

I think this is why identity is important even though distinct from
authenticity.

Our systems are secure when the potential benefit to an attacker is
low compared to the potential risk.

Identity may not always help us make correct access decisions so it
may not reduce the benefit but it does enable forensics which enables
police action which raises the potential cost to an attacker, and it
may inform the next cycle of system design.