[cap-talk] A better reference for the "capabilities propagate too easily" argument

[Jonathan S. Shapiro]

On Mon, 2007-07-30 at 21:45 -0700, Jed Donnelley wrote:
> After that time (say 1987) I know of no designs initiated
> using capability access control until the attempt to
> revive some of the KeyKOS concepts in EROS.  When did
> that work start?  Late 1990s?

Early 1990's. 1991, to be precise, which was when I left HaL. The first
version came up on an i386 in my home in Campbell, California. Shortly
thereafter all was lost to a physical head crash on a drive. For those
of you who think ancient history is peculiar to mainframes, that version
supported ESDI drives and the EISA bus, which at that time was the
bleeding edge in PCs.