RE: abbreviations for authentication and authorization

[George_Robert_Blakley_III@tivoli.com]

I also agree ... I prefer "authn" to "authc".

--bob

Bob Blakley
Chief Scientist, Security
Tivoli Systems, Inc.


Hal Lockhart <hal.lockhart@entegrity.com> on 01/31/2001 09:42:25 AM

To:   "'OASIS SSTC use'" <security-use@lists.oasis-open.org>
cc:
Subject:  RE: abbreviations for authentication and authorization



I agree. I can date authc and authz back at least 10 years (symbols for
constants in DCE). I don't know where Joe got them from before that.

Hal

> -----Original Message-----
> From: Jeff Hodges [mailto:jhodges@oblix.com]
> Sent: Wednesday, January 31, 2001 3:12 AM
> To: OASIS SSTC use
> Subject: abbreviations for authentication and authorization
>
>
> Darren Platt <dplatt@securant.com> wrote..
> > Abbreviations - Please, Please Don't Use 'Auth'!!!
>
> I've observed a fair amount of usage of "authn" for
> authentication, and "authz"
> for "authorization".
>
> I agree we shouldn't use the abbreviation "auth" because it
> is quite ambiguous
> in our context.
>
> Aesthetically, I've never really liked "az" or "azn" for
> authorization,
> especially when being used alongside some variation of "auth(n)" for
> authentication.
>
> JeffH
>