[cap-talk] membrane challenge - Attack discussion

Zooko O'Whielacronx zooko at zooko.com
Wed Nov 17 06:35:17 EST 2004

There is a plausible belief which is disproven Jed's "hat check server 
vs. membrane" example.  That wrong but dangerously plausible idea is 
that given a starting capability, membranes can render that capability 
*and* the authority that it conveys revokable.  Instead, membranes can 
render only capabilities revokable.

Is that right?



More information about the cap-talk mailing list