[cap-talk] Capabilities - the rub, an account

[Sandro Magi]

Jed at Webstart wrote:

> Have I got it right/wrong with regard to what's possible with
> DVH style capabilities?  Could we improve an object/capability
> system so that delegated capabilities could only be accessed
> by the receiver of the delegated capability and not the sender?
> I'm sure that could be done with some effort.  I don't know of any
> instance where it has been done. 

This sounds like capabilities with "do not delegate" bits; once you
delegate the capability, it can't be further delegated which seems just
as good as binding it to some sort of identity.

Sandro