[cap-talk] membrane challenge - Attack discussion
zooko at zooko.com
Wed Nov 17 06:35:17 EST 2004
There is a plausible belief which is disproven Jed's "hat check server
vs. membrane" example. That wrong but dangerously plausible idea is
that given a starting capability, membranes can render that capability
*and* the authority that it conveys revokable. Instead, membranes can
render only capabilities revokable.
Is that right?
More information about the cap-talk