Understanding the Difference Between Authentication and Authorization

These two words get used as if they mean the same thing, and the confusion causes real security problems. They describe two separate questions that every protected system has to answer, and answering one does not answer the other. Two…








