[cap-talk] A question on capabilities

Zooko zooko at zooko.com
Mon Jun 12 09:50:35 EDT 2006


On Sun, 2006-06-11 at 21:22 -0700, David Wagner wrote:
>
> But what about the risk of Alice
> unintentionally leaking her capability to Bob?  Do capability systems have
> a good story about how to deal with that?

Oh, in addition to the Voluntary Oblivious Compliance idioms, I should
also mention that a common cause of this kind of mistake on Alice's part
is because she is a Confused Deputy.  Capability systems have an
excellent story about reducing the incidence of such mistakes.

Regards,

Zooko




More information about the cap-talk mailing list