[cap-talk] RE: OS security discussion, restricted access processes,
etc. - back to basics
list at waterken.net
Sat May 8 16:36:05 EDT 2004
David Hopwood wrote:
> Norman Hardy wrote:
>> I have changed my mind about one fundamental thing.
>> I once thought that local wire names and (global) Swiss numbers were
>> fundamentally different.
>> I now see them as optimizations of each other.
>> My contorted note at <http://cap-lore.com/CapTheory/Dist/Which.html> is
>> where I convince myself that they are equivalent.
> There is a difference between them that is not just an optimization. For
> local wire names, the process(es) that convert between the names used on
> different inter-domain wires are in a position to track which capabilities
> are held by each domain, or to maintain invariants on those capability
Are you proposing that this is a useful thing to do?
The web-calculus is the union of REST and capability-based security.
More information about the cap-talk