RE: reg_username and reg_password

From: Charles Daminato (chuck@tucows.com)
Date: Wed Mar 13 2002 - 09:47:24 EST


When you want to associate multiple domains into the same profile, using
just the password isn't enough, since we'd have to ensure any password
that's previously used (and isn't *your* profile) isn't duplicated.

And for security reasons, if we use just domain/password, there's already
one public piece of information for access to the domain. With a username
it's a higher level of security (through obscurity)

Charles Daminato
OpenSRS Product Manager
Tucows Inc. - chuck@tucows.com

> -----Original Message-----
> From: owner-dev-list@opensrs.org [mailto:owner-dev-list@opensrs.org]On
> Behalf Of Fagyal Csongor
> Sent: March 13, 2002 9:44 AM
> To: Frank Michlick; klaus rubba; dev-list@opensrs.org
> Subject: Re: reg_username and reg_password
>
>
>
>
> > Klaus,
> >
> > the username/password are not unique, the domain name is the unique
> identifier
> > used in our systems. So the same username can be used several times on
> different
> Why is there a password then, if profiles are made of
> domain/username/password triples?
>
> Please show me an example where a domain/password pair is not enough.
>
> - Cs.
>
>
>



This archive was generated by hypermail 2.1.3 : Tue Oct 19 2004 - 23:37:04 EDT