3 ms·
What I love is the smartcard... Well ... Main AAA (Authentication/Auhtorizaation/Accounting) problem is the clould. How can we federate identity and manage the
by SFJulie 10y ago
What I love is the smartcard... Well ... Main AAA (Authentication/Auhtorizaation/Accounting) problem is the clould.
How can we federate identity and manage them safely?
Plus, once you decide to be connected how to make AAA system talk to each others?
And then, sometimes you need to make money ... and you know, safely pass token forth and back... And what standard solution do we have that is not a framework?
Well, 3GPP proposed IMS based on IETF Diameter. Still not there.
Some proposed Role Based Accounting and proxy authz based on LDAP ... well not really deployed.
So we are also waiting for a new standard of inter communication of centralized Enterprise Directory that has tokens, tickets, multi policy for authentication according to origin, roaming, sane schema...
LDAP is honestly a good tool, is it actually relying on a secured, strongly typed NOSQL. But, I hardly saw any devs understand the anonymous bind then authed bind mechanism.
I do feel our biggest problem is not in the tools/technology, but rather in too much education of people that are useless in production.
- jon-wood 10y ago> Main AAA (Authentication/Auhtorizaation/Accounting) problem is the clould. > How can we federate identity and manage them safely? AWS, and I assume Google's stuff, will let you integrate their authentication system with your internal one using SAML to authenticate.
- SFJulie 10y agoSAML is based on SOAP no? SOAP that google dropped for security and overcomplexity concern while security studies tends to say the bigger risk is using system you cannot fully understand, no? It seems to me like modern security by trust in "expert" rather than understanding the basics. But I guess I am wrong in my appreciation?
- windowsworkstoo 10y agoSOAP is just a message format though, so does it matter? SAML works, so long as the implementation is good (assumption, yes)
- SFJulie 10y agoand Oauth is said to be a security framework that can easily go wrong... in its implementation of a solution. there is no concern here neither?
- windowsworkstoo 10y agoDont know, not familiar enough, my point was writing something because it talks in SOAP seems...petty?
- SFJulie 10y agoHell often lies in the details