From mboxrd@z Thu Jan  1 00:00:00 1970
Date: Mon, 15 Nov 2010 12:40:31 -0500
From: Nathaniel W Filardo <nwf@cs.jhu.edu>
To: Fans of the OS Plan 9 from Bell Labs <9fans@9fans.net>
Message-ID: <20101115174031.GH21298@gradx.cs.jhu.edu>
References: <AANLkTim7cWNy6t=keucv0gKN+rUDhHA7O8JFh+9ZDMFK@mail.gmail.com>
	<AANLkTinTA00yUuQKDWfqTH3NDgMDq4b1xmLJEY4Xw4vZ@mail.gmail.com>
	<AANLkTik405F5QyOo+amCwMk6_NkRbpZKZb_hvjZy=+Dc@mail.gmail.com>
	<AANLkTi=tiVM-irt0L-bqiM-jmpAQ1TU8sz-C2zL9bFFy@mail.gmail.com>
	<AANLkTi=AEYMTsjmJuen2PzhcErWcjLnj73tdWsPaKCVK@mail.gmail.com>
	<AANLkTimK+47cC4YZ05824yhg58vAP4sQz2D3mqfE7qHp@mail.gmail.com>
	<AANLkTimonyqxozaQ9gD49GUO_xU-BDTLy3R2uMnd=6sd@mail.gmail.com>
	<AANLkTi=fTWYdgCo3HTWAjkz=w>
	<20101114224925.GB21298@gradx.cs.jhu.edu>
	<081ad47d62311a4a160875fc8bc9247f@coraid.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="0OWHXb1mYLuhj1Ox"
Content-Disposition: inline
In-Reply-To: <081ad47d62311a4a160875fc8bc9247f@coraid.com>
User-Agent: Mutt/1.5.20 (2009-08-17)
Subject: Re: [9fans] p9p factotum available for plan 9
Topicbox-Message-UUID: 80449cf6-ead6-11e9-9d60-3106f5b1d025


--0OWHXb1mYLuhj1Ox
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Nov 15, 2010 at 11:22:52AM -0500, erik quanstrom wrote:
> > > How do you map it to a local identity?
> >=20
> > There's less need to, since most rights checks would be done using the =
key
> > directly, but eve's factotum also probably has a SPKI key, and your ide=
ntity
> > can be stringified into a path of names if necessary.
>=20
> in that case, what do you do with the username? do you have
> to change username if you rekey?

Hm; I wasn't thinking about rekeying.

You're free to use the path from eve's factotum, which may go via a local
naming authority, if you like.  Then the authority simply changes its view
of names in response to your rekeying and everything stays the same.

--nwf;

--0OWHXb1mYLuhj1Ox
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkzhcI8ACgkQTeQabvr9Tc9/aQCcDFPhSVip5w6i2olN6NNoHQiE
KTQAn13KZ5uI+AghW3S/iD++hDu3IQV7
=9tWd
-----END PGP SIGNATURE-----

--0OWHXb1mYLuhj1Ox--