4 ms·

The lesson is that you can't authorize indiscriminate access to public services on the internet for single-factor authenticated users. edit: Ugh, Wordy. Shorte

The lesson is that you can't authorize indiscriminate access to public services on the internet for single-factor authenticated users. edit: Ugh, Wordy. Shorter: Identity is more than a public key.

mikeash 10y ago
Also, security is more than identity. You still need to be robust against malicious input even if you know exactly who all your users are.
- dvanduzer 10y ago
  Indeed. The third leg that solves this problem is known to the industry as Accounting.