4 ms·

Medical checks of name and DoB aren’t authentication - they’re more of a parity check. There’s not generally a lot of value in a medical treatment scenario in i

• kube-system 2y ago
  Doctors don't ask for your name and DoB to verify that your bits are in order. They do it to verify the identity of the patient. Authentication is literally: any process used to verify the identity of someone. The definition holds no requirement for any level of certainty, or anything else for that matter. Asking someone for their name and DoB is just weak authentication. The fact that is it not an adversarial scenario is why weak authentication works just fine for the use case. This is an illustration why there is no such thing as a universally "good authentication" or "bad authentication". A good authentication design depends entirely on the specific problem being solved.
  • jameshart 2y ago
    > Doctors don't ask for your name and DoB to verify that your bits are in order. Metaphorically, yes they do. They're mainly checking they're in the right room talking to the patient whose name is on the notes in front of them. It's a checksum, not an identity challenge.