<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" id="owaParaStyle"></style><style type="text/css"></style>
</head>
<body fpstyle="1" ocsi="0">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Hi all,
<div>I'd like some of the original OpenStack Security Guide authors to triage this doc bug. <a href="https://bugs.launchpad.net/openstack-manuals/+bug/1253823" target="_blank" style="font-size: 10pt;">https://bugs.launchpad.net/openstack-manuals/+bug/1253823</a></div>
<div><br>
</div>
<div>Is this a true concern? Please weigh in on the bug.</div>
<div><br>
</div>
<div>
<p style="margin-right: 0px; margin-bottom: 1.2em; margin-left: 0px; padding: 0px; width: auto; max-width: 45em; color: rgb(51, 51, 51); font-family: 'Ubuntu Mono', monospace; font-size: 12px; line-height: 18px; background-color: rgb(255, 255, 255);">
This chapter says "The Identity service could alternatively be configured to provide UUID tokens which are significantly shorter but may be less secure depending on your specific deployment model."</p>
<p style="margin-right: 0px; margin-bottom: 1.2em; margin-left: 0px; padding: 0px; width: auto; max-width: 45em; color: rgb(51, 51, 51); font-family: 'Ubuntu Mono', monospace; font-size: 12px; line-height: 18px; background-color: rgb(255, 255, 255);">
There's not meant to be any difference in security between using PKI versus UUID tokens. PKI tokens are supposed to save on network traffic and keystone server CPU (although I'm not sure that they do). Choosing PKI or UUID isn't a question of PKI is more secure.
They're the same.</p>
<p style="margin-right: 0px; margin-bottom: 1.2em; margin-left: 0px; padding: 0px; width: auto; max-width: 45em; color: rgb(51, 51, 51); font-family: 'Ubuntu Mono', monospace; font-size: 12px; line-height: 18px; background-color: rgb(255, 255, 255);">
-------<wbr>-------<wbr>-------<wbr>-------<wbr>-------<br>
Built: 2013-11-21T20:48:44 00:00<br>
git SHA: 216e166bd12b79d<wbr>533be12c139aaef<wbr>740a2ff7f1<br>
URL: <a rel="nofollow" href="http://docs.openstack.org/security-guide/content/ch024_authentication.html" style="color: rgb(0, 51, 170); text-decoration: none;">http://<wbr>docs.openstack.<wbr>org/security-<wbr>guide/content/<wbr>ch024_authentic<wbr>ation.html</a><br>
source File: file:/home/<wbr>jenkins/<wbr>workspace/<wbr>openstack-<wbr>security-<wbr>guide/doc/<wbr>security-<wbr>guide/ch024_<wbr>authentication.<wbr>xml<br>
xml:id: ch024_authentic<wbr>ation</p>
<p style="margin-right: 0px; margin-bottom: 1.2em; margin-left: 0px; padding: 0px; width: auto; max-width: 45em; color: rgb(51, 51, 51); font-family: 'Ubuntu Mono', monospace; font-size: 12px; line-height: 18px; background-color: rgb(255, 255, 255);">
<br>
</p>
<div><br>
<div style="font-family:Tahoma; font-size:13px">
<div style="font-family:Tahoma; font-size:13px"><span style="font-size:13.3px; font-family:Verdana,Arial,Helvetica,sans-serif">
<div style="margin:0pt 0pt 8px">
<div style="padding:5px; font-size:11px; color:rgb(102,102,102); font-family:sans-serif">
<strong>Anne Gentle</strong> <br>
Content Stacker<br>
<a href="http://justwriteclick.com/" target="_blank">my blog</a> | <a href="http://xmlpress.net/publications/conversation-community/" target="_blank">
my book</a> | <a href="http://www.linkedin.com/in/annegentle" target="_blank"><span>LinkedIn</span></a> |
<a href="http://del.icio.us/annegentle" target="_blank">Delicious</a> | <a href="http://twitter.com/annegentle" target="_blank">
Twitter</a>
<div style="font-size:10px"></div>
</div>
</div>
<img src="http://s.wisestamp.com/pixel.png?p=mozilla&v=2.0.3&t=1288309618992&u=5503527&e=9857" height="1" width="1"></span></div>
</div>
</div>
</div>
</div>
</body>
</html>