Re: Fwd: Re: [Cryptography] Encryption opinion

In other words, we know how to implement these patterns, but
(unfortunately) nobody does it.

Instead, current implementations focus too much on who somebody is, rather
than whether they should be able to do what is requested.



On Mon, Sep 1, 2014 at 12:40 PM, Karp, Alan H <[email protected]> wrote:

>  Terry Hayes wrote:
>
> I think much of this feels like Tyler’s Web Introducers:
>
>   1) The general URL provided by the blog (affiliate) corresponds to a
> service request.
>
>   2) The URL-specific cookie represents the user’s participation.
>
>   3) Amazon’s personalized ad page generator represents the service
> implementation.
>
> I believe that OAuth 2 has such an introducer pattern.  It can even be set
> up to allow low value purchases to happen automatically while having Amazon
> confirm high value ones.
>
>
>
> ________________________
>
> Alan Karp
>
> Principal Scientist
>
> Enterprise Services, Office of the CTO
>
> Hewlett-Packard Company
>
> 1501 Page Mill Road
>
> Palo Alto, CA 94304
>
> (650) 857-3967, fax (650) 857-7029
>
> http://www.hpl.hp.com/personal/Alan_Karp
>
> _______________________________________________
> cap-talk mailing list
> [email protected]
> http://www.eros-os.org/mailman/listinfo/cap-talk
>
>

_______________________________________________
cap-talk mailing list
[email protected]
http://www.eros-os.org/mailman/listinfo/cap-talk