[cap-talk] A question on capabilities
zooko at zooko.com
Mon Jun 12 09:50:35 EDT 2006
On Sun, 2006-06-11 at 21:22 -0700, David Wagner wrote:
> But what about the risk of Alice
> unintentionally leaking her capability to Bob? Do capability systems have
> a good story about how to deal with that?
Oh, in addition to the Voluntary Oblivious Compliance idioms, I should
also mention that a common cause of this kind of mistake on Alice's part
is because she is a Confused Deputy. Capability systems have an
excellent story about reducing the incidence of such mistakes.
More information about the cap-talk