[cap-talk] - Karp - Capabilities - tracking responsibility (Was: Bellizzomi - Users in object/capability systems (was: MLS gone bad, Lampson))

[Karp, Alan H]

Valerio Bellizzomi wrote:
> 
> I don't see where is the difference with non-repudiation, if Bob can't
> deny having taken an action that he actually took, how can 
> Jed blame Tyler
> for an action taken by Bob?
> 
One way would be if Jed doesn't have a means of identifying Bob
independent of Tyler.  In that case, Tyler might be using the Bob
identity.  Non-repuduation, but Jed has a resonable basis to hold Tyler
accountable.

_________________________
Alan Karp
Principal Scientist
Virus Safe Computing Initiative
Hewlett-Packard Laboratories 
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
https://ecardfile.com/id/Alan_Karp
http://www.hpl.hp.com/personal/Alan_Karp/
  
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Karp, Alan H.vcf
Type: text/x-vcard
Size: 423 bytes
Desc: Karp, Alan H.vcf
Url : http://www.eros-os.org/pipermail/cap-talk/attachments/20061201/efcd25de/attachment.vcf