[cap-talk] short circuiting revokable proxy chains at the price of cascaded revocation?

[Rob Meijer]

While working on the design of dgatefs, I am running into an important
design issue. If a resource is used through a large set of proxies
(revocable delegations), access to the resource will normaly require all
the proxies
to be used.
As a possible alternative, that is as a major performance boost on regular
access, each proxy could get short-cuircuited to directly access the
resource.
The price of this alternative would however be that revocation that would
normaly be a cheap operation would get realy expensive. That is we would
end up with a cascaded revocation.
Would such expensive cascaded revocation be a reasonable price to pay for
the performance boost for regular access, or is this a realy bad concept?

Rob