[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

Re: Expertise and Innovation - was Re: Non-Borg serv

• To: "'xml-dev@l... '" <xml-dev@l...>
• Subject: Re: Expertise and Innovation - was Re: Non-Borg servers can authenticate Borg clients (Was Re: Re: Cookies at XML Europe 2004 -- Call for Participation)
• From: "Simon St.Laurent" <simonstl@s...>
• Date: Sat, 10 Jan 2004 09:35:53 -0500
• In-reply-to: <Pine.LNX.4.44L0.0401100752020.21696-100000@s...>

rsalz@d... (Rich Salz) writes:
>> It's tough when Elliotte's that completely right, but it happens
>> pretty regularly.  Usually when I'm on the other side, unfortunately.
>
>Hey, let's not get carried away.
>
>Just because digest-auth is more interoperable than we all expected,
>doesn't mean it's the right thing to do.  I still strongly stand by my
>arguments against it and in favor of those old-fogey security
mechanisms.

I don't expect the old-fogey security mechanisms to go away any more
than I expect to see SAML implemented in browsers.  

Elliotte does seem to have demonstrated very effectively, however, that
there are not only simpler workable approaches, but that the necessary
components are widely implemented.  They may not cover every case you
can come up with, but it seems to me that he's created a space in the
conversation where new - and easier, and cheaper - things can happen.

-- 
Simon St.Laurent
Ring around the content, a pocket full of brackets
Errors, errors, all fall down!
http://simonstl.com -- http://monasticxml.org

• Follow-Ups:
  • Re: Expertise and Innovation - was Re: Non-Borg servers can authenticate Borg clients (Was Re: Re: Cookies at XML Europe 2004 -- Call for Participation)
    • From: Tim Bray <tbray@t...>

• References:
  • Re: Expertise and Innovation - was Re: Non-Borgservers can authenticate Borg clients (Was Re: Re: Cookies atXML Europe 2004 -- Call for Participation)
    • From: Rich Salz <rsalz@d...>

• Prev by Date: Re: Expertise and Innovation - was Re: Non-Borgservers can authenticate Borg clients (Was Re: Re: Cookies atXML Europe 2004 -- Call for Participation)
• Next by Date: Re: Why is xml:base a URI *reference*?
• Previous by thread: Re: Expertise and Innovation - was Re: Non-Borgservers can authenticate Borg clients (Was Re: Re: Cookies atXML Europe 2004 -- Call for Participation)
• Next by thread: Re: Expertise and Innovation - was Re: Non-Borg servers can authenticate Borg clients (Was Re: Re: Cookies at XML Europe 2004 -- Call for Participation)
• Index(es):
  • Date
  • Thread