[cap-talk] In Defense of Identities - not

[Sandro Magi]

Marcus Brinkmann wrote:
>> This in turn means that we are introducing an entirely new capability
>> model, because one of the operations (we may want others) takes the
>> form:
>>
>>   domain->revoke(cap)
>>
>> and we don't want to search the domain to hunt them down. This is quite
>> a serious mess.
>>     
>
> I am not sure I understand what this operation does and what is
> searched.
>   

Looks to me like it searches the domain's c-list for the given
capability and revokes it. Seems to coincide with Jonathan's statement
as well.

Sandro