Hacker News Reader

Comment by colinclerk | Hacker News Reader

Thank you for calling out the headers. We'll work to resolve right away.

And agreed on the CDN JS. We'll move these assets to the customer's domain.

It’s a great idea, but your company is going to be a serious target. You not only will have the ability to control authN, but you’ll own authR also if you’re managing users and groups. You’ll also own all the conference rooms, printers, servers, etc., since you’ll be hosting Active Directory for the Windows folk... at least that’s how I’d understand user management for auth.

Is authR another way to say authZ? I've never heard of authR and a quick google seems to mostly show a cloudflare project and stuff related to the term "author".

I took it to mean authz. Never seen authR before either.

It seems to be the new way to say it. I've known both as AuthN and AuthZ but AuthR picked up for some reason or another.

In the same vein, it seems like a lot of people aren't too aware of the "identity" space so there's a whole lot of re-inventing the wheel with external sources not realizing something already exists.

I think authN is Authentication and authR is authorisation. Two related but slightly different concepts. The third of the trio is Accounting which completes the AAA, the family of protocols that mediate access on the internet [0]

[0]: https://en.wikipedia.org/wiki/AAA_(computer_security)

edit: added reference and context for completion.

Reply on news.ycombinator.com