Hacker News new | ask | show | jobs
by yellowapple 3291 days ago
I suppose it could be in a capability-based security scheme. In such a scheme, authorization is based upon tokens that are passed around and could be owned by any user or process, making authorization separate from identification.