Matej Kosik wrote: > What do you mean by "identity centric"? How can authentication not be > identity centric? Determining identity of the principal at the other end > of the communication channel is the point. It usually should not be the point. Consider, for example an immutable file.