[cap-talk] - Karp - Capabilities - tracking responsibility (Was: Bellizzomi - Users in object/capability systems (was: MLS gone bad, Lampson))

[Karp, Alan H]

Valerio Bellizzomi wrote:
>From the standpoint of accountability Jed has to ignore the 
> new identity,
> thus still holding Tyler accountable.
> 
Yes, but he can still record Bob's identity for Tyler's benefit.
> 
> At a first glance, if I didn't trust your identity I would 
> contact HP and
> ask to speak with you.
> 
You are now following the trust relationships.  You trust HP, and you're
asking if HP trusts me.  In that case, you will trust me no more than
you trust HP (and probably a good deal less).
> 
> Since we are members of the capability community, I am led to 
> trust your
> identity.
> Ok, but I know that you are famous for your work in parallel 
> computing (if
> I remember correctly you offered money for a parallel 
> computing contest).

You're dating yourself.  I did that in 1986.  That's ancient history.

> It is instructive to talk with you, so my experience in 
> dealing with you
> is positive even we haven't been friends, this leads me to trust your
> identity.
> 
As is my experience with you.  Now, about your wife ... :)  That comment
is only partly a joke.  Trust is not binary.  I trust my bank with my
money but not my children.  I trust my relatives with my children but
not my money.

________________________
Alan Karp
Principal Scientist
Virus Safe Computing Initiative
Hewlett-Packard Laboratories
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
https://ecardfile.com/id/Alan_Karp
http://www.hpl.hp.com/personal/Alan_Karp