[cap-talk] short circuiting revokable proxy chains at the price of cascaded revocation?
rmeijer at xs4all.nl
Sun Jan 14 03:31:49 CST 2007
While working on the design of dgatefs, I am running into an important
design issue. If a resource is used through a large set of proxies
(revocable delegations), access to the resource will normaly require all
to be used.
As a possible alternative, that is as a major performance boost on regular
access, each proxy could get short-cuircuited to directly access the
The price of this alternative would however be that revocation that would
normaly be a cheap operation would get realy expensive. That is we would
end up with a cascaded revocation.
Would such expensive cascaded revocation be a reasonable price to pay for
the performance boost for regular access, or is this a realy bad concept?
More information about the cap-talk