alt Hacker Newsthank you for the clarification - thankfully some much smarter people than I are working on the protocol aspects :)
when I say `authorize who you are` I mean to say that you're saying both "hello I am in fact john doe" and "john doe the human is also saying this is ok to do".
I think this is interesting in the lens of Muse, GrokBot, Dots, OpenClaw, etc; if my agent wanted to rent a car on my behalf, it would forcibly have to get approval from me to do so
Authentication is (proving) who you are.
Authorization is the process of determining if someone can do something.
That you’re conflating multiple distinct concerns doesn’t build confidence.