[cap-talk] RE: OS security discussion, restricted access processes, etc. - back to basics

[Tyler Close]

David Hopwood wrote:
> Norman Hardy wrote:
> 
>> I have changed my mind about one fundamental thing.
>> I once thought that local wire names and (global) Swiss numbers were 
>> fundamentally different.
>> I now see them as optimizations of each other.
>> My contorted note at <http://cap-lore.com/CapTheory/Dist/Which.html> is
>> where I convince myself that they are equivalent.
> 
> 
> There is a difference between them that is not just an optimization. For
> local wire names, the process(es) that convert between the names used on
> different inter-domain wires are in a position to track which capabilities
> are held by each domain, or to maintain invariants on those capability
> sets.

Are you proposing that this is a useful thing to do?

Tyler

-- 
The web-calculus is the union of REST and capability-based security.
http://www.waterken.com/dev/Web/