Re:Password expiration is dead, long live passwords
by raehik on Monday June 03, 2019 @04:23AM
(#20081344)
Exactly, built-in delegation and impersation features solve this. AWS IAM and Kubernetes have great implementations. Hopefully we get some more standards like OAuth so people talk about this stuff more.
Re:Password expiration is dead, long live passwords
by WorldMaker on Monday June 03, 2019 @02:56PM
(#20086843)
On the consumer side there's also the various "Family Sharing" systems that are only now in their youth. I think that's a "digital asset rights" fight waiting in the wings that some sort of "family sharing" should probably be guaranteed (by laws, probably), including to answer questions of proper transferal of "ownership" (right now "family sharing" in most cases isn't something that you can gift in a will/estate; most digital asset accounts aren't considered survivable after the death of their original user).
There are so many interesting legal questions about digital assets that we're all afraid to ask, but probably should be solving today (if not yesterday).
But the correct pattern is a formal system for delegation and/or disconnecting 'login' with 'account' (i.e. separate charging for a service from the login). This is something that AWS does very well for example.