[cap-talk] membrane challenge - Attack discussion

[Zooko O'Whielacronx]

There is a plausible belief which is disproven Jed's "hat check server 
vs. membrane" example.  That wrong but dangerously plausible idea is 
that given a starting capability, membranes can render that capability 
*and* the authority that it conveys revokable.  Instead, membranes can 
render only capabilities revokable.

Is that right?

Regards,

Zooko