[security] User Impersonation

Paul C. Bryan email at pbryan.net
Mon Mar 5 18:03:23 UTC 2007


On Mon, 2007-03-05 at 19:54 +0200, Dmitry Shechtman wrote:

> Yes, you are missing something. The wiki will assume your identity to be
> http://attacker.org/attackjohn.html

Okay, so the point here is always delegation of authentication, not of
identities. Thanks for clearing this up for me.

Paul




More information about the security mailing list