Re: [Rats] Call for charter consensus

[Carsten Bormann <[e-mail]>]

On Jan 19, 2019, at 02:23, Benjamin Kaduk <[e-mail]> wrote:
> 
> On the one hand,
> there's the raw crypto bits of "this is what signature validation/MIC
> verification/etc. you have to do in order to get the cryptographic
> validation that key X generated data Y [at time Z]”,

I would call that “verification” (related to “authentication”).

> but once you've done
> that, the decision of verifying that Y and Z are something you find
> trustworthy to perform action W is not really something we can standardize.

I would call that “policy realization” (related to “authorization”).

> My understanding is that we plan to talk about the crypto but not, at least
> at first, what you do after confirming that the crypto has not been
> tampered with.

That is also my understanding: we enable verification, but we don’t do the policy.

Grüße, Carsten