Multiple credentials (was: Re: Missed Items)

Stephen Farrell <[email protected]> Thu, 13 Dec 2001 18:26:54 +0000
Newsgroups gmane.ietf.sacred
Organization Baltimore Technologies Ltd.
Message-ID <[email protected]>

This looks fine to me.

Stephen.

> 2. Multiple Credentials.
> The I-D has the credential selector as an optional argument in upload and
> download requests (section 2.4).  If the selector was omitted then it is
> used to select the default credentials.  We felt this could be potential
> for confusing since the notion of a user's default credentials could vary
> over time.  For example, if a user uploads credentials "cred1" and later
> credentials "cred2" then "cred1" will be the default.  If "cred1" is later
> deleted then presumably "cred2" would become the default and would be
> downloaded with a null selector name.  There is similar possible confusion
> during credential upload and delete when a user could inadvertently replace
> the wrong credentials.
> 
> The proposal is that there will be no default credentials and that all
> credentials must have a selector unique for that account.  The selector
> would be required for upload requests and optional for download requests.
> If omitted in a download request it would be interpreted as a request for
> all the stored credentials.

-- 
____________________________________________________________
Stephen Farrell         				   
Baltimore Technologies,   tel: (direct line) +353 1 881 6716
39 Parkgate Street,                     fax: +353 1 881 7000
Dublin 8.                mailto:[email protected]
Ireland                             http://www.baltimore.com