News for hackers. Stuff that matters.

A comment on Instead of "auth", we should say "permissions" and "login". Parent comment

Re:Instead of "auth", we should say "permissions" and "login" by chipdart on Tuesday May 28, 2024 @10:14AM (#40500947)
> Having two almost identical terms that mean completely different things is not a very good idea.

What's the problem of telling apart the task of authenticating users from authorizing their access?

There's already identification and authorization (IAM) which is mostly a backronym.

[ Parent | on HN ]
Re:Instead of "auth", we should say "permissions" and "login" by swombat on Tuesday May 28, 2024 @10:24AM (#40501028)
Identification & Authorisation are a better pairing here than Authentication and Authorisation.

This way, if someone says "Oh yeah we have an auth module on this site" you don't need to immediately disambiguate the statement.

But then "auth" itself is ambiguous. So it might make sense to get rid of the lot. "Identification" is a good word for the first. Perhaps "Permissions" for the second?

[ Parent | on HN ]
Re:Instead of "auth", we should say "permissions" and "login" by yencabulator on Tuesday May 28, 2024 @12:19PM (#40502387)
authn -> ident

authz -> perm

So much clearer.

[ Parent | on HN ]