[cap-talk] capabilities are inherently multiuser things, correct?

[Norman Hardy]

If you use some software on your computer that I wrote, for your  
purposes, how many users are there on your computer?
With a capability system you must worry that the data my program  
produces for you is wrong, but you need not worry that it corrupts  
your data unless you give my program write access to your data.
With capabilities, you need not worry that my program sends your  
secret data that you give to my program, to places outside of your  
computer, even if your computer is attached to internet.

On 2007 Aug 11, at 3:52 PM, John Carlson wrote:

> It doesn't make any sense to have a single-user capability system,
> correct?  When I say single-user, I mean
> no messages from the outside, and no requests going out across the
> internet, etc.  If capabilities are going
> to be something, they've got to get out of the single-user mindset.