[Auth]Re: DotGNU reference

[S11001001]

Adam Theo wrote:
> I found this refernce to DotGNU, specifically its Virtual Identities 
> effort:
>
> http://java.sun.com/features/2002/05/single-signon.html
>
> I think they got it wrong, though. They are saying DotGNU's Single 
> Sign-On mechanism (does it have one yet?) is a third-party security 
> service like Passport and XNS. In other words a centralized service that 
> manages all assertions for everyone. This is in contrast to the Liberty 
> Alliance way of a group (or federation) of organizations that get 
> together and share between each other, after forming bonds of trust.

Well, "third party security service" is not necessarily centralized, and 
does include LA. The only difference between LA and Passport et al is 
that LA is multi-vendor. However, "DotGNU security service" is only an 
interoperability & outside interface standard. FrePort and MACS are auth 
systems. DotGNU will never have its own SSO; SSO is a function of the 
auth plugins (not to be confused with runtime/VM plugins to SEE ;)

Look at some other articles by Jon Byous; he's a real company man. 
Anything written by him should be taken with that in mind. Not that it 
would be natural to read other stuff by him.... :)

--
Stephen Compall
DotGNU `Contributor' -- http://dotgnu.org

Free Software is all about dignity. This dignity is what makes the
whole thing different.  It changes the relationship from subservient
user and all-powerful creator (even if you're a developer) to an
egalitarian relationship.
        -- Barry Fitzgerald