RE: [dss] Authentication in DSS

[John Messing <jmessing@law-on-line.com>]

Agreed. Shouldn't biometric identifiers be included? Web authentication digital certificates? Also layered authentication using one or a combination of methods?

---------- Original Message ----------------------------------
From: "Kaliski, Burt" <BKaliski@rsasecurity.com>
Date:  Tue, 28 Jan 2003 16:47:42 -0500

>User name / password is the simplest option, but the framework should be
>flexible enough to accommodate other choices (both in terms of how the user
>is authenticated, and what needs to be stored at the DSS server).
>
>-- Burt
>
>-----Original Message-----
>From: John Messing [mailto:jmessing@law-on-line.com]
>Sent: Tuesday, January 28, 2003 8:22 AM
>To: dss@lists.oasis-open.org
>Subject: RE: [dss] Authentication in DSS
>
>
>Can we include simple usernames and passwords, perhaps with requirements as
>to security for transportation to and storage at the DSS server, in 2? 
>