[cap-talk] A petname toolbar for Firefox

[Tyler Close]

On Feb 22, 2005, at 2:49 PM, Jed at Webstart wrote:

> On that note - is "untrusted" just another valid Petname?

No, "untrusted" is not a valid petname. "untrusted" is the identifier 
for the absence of a trust relationship.

I put the null identifier in the same namespace as non-null identifiers 
to facilitate communication of the two states. For example, you can 
destroy a previously created trust relationship by renaming it to 
"untrusted". The petname toolbar will notice this special name and 
delete the corresponding binding from the database of petnames.

>   It seems to me that perhaps this current implementation is a bit 
> "thin".

A common first impression of my designs. I assure you there's purpose 
behind my apparent inaction. What's missing is often equally, or even 
more important than what is present.

> For example, what about the issue of name collision.  I noticed that I 
> can assign the Petname "IBM" for https://www.ibm.com/ and then it will 
> happily (without notice) let me assign that same Petname "IBM" to 
> https://www.wellsfargo.com/.

I consider this a feature, not a bug. Remember, we are characterizing 
the trust relationship, not the identity of the website. For example, I 
believe Microsoft owns Expedia. You might rationally decide to give 
both websites the same petname, using the logic that you shouldn't 
trust either website any more than the other since it's the same 
ownership behind both websites.

>   Don't you think it would be helpful to at least point out the name 
> collision?

Inadvertent name collisions seem very unlikely, especially if the user 
is using the petname tool as directed. On the other hand, there are 
many practical and important uses for intentional collisions.

> Also, I don't know about others, but I would value the ability to view 
> my Petname binding "database".  Is there a way to do that?

Not a convenient way. I do agree that this feature is important, I'm 
just not sure how best to implement it yet. Marc Stiegler (I think) 
suggested that the petname tool automatically create a bookmark to the 
current page when a petname is created. I think something along those 
lines could be the right design. I'm still working over the details. 
Please kick in any ideas you have.

Tyler

---
The web-calculus is the union of REST and capability-based security:
http://www.waterken.com/dev/Web/