[cap-talk] communication and capabilities

[John Carlson]

One issue I have with capability systems is that they seem to assume  
that the communication
path between objects is secure.  Are there any papers that deal with  
this?  If you draw
an arrow on a piece of paper, doesn't the surface below the paper  
know in some way what
is happening?  I think ACLs also assume the same secure path, so I'm  
not really throwing
potshots at anyone.

John