[cap-talk] Selling capabilities programming

Jonathan S. Shapiro shap at eros-os.com
Wed Jul 25 23:45:25 EDT 2007


On Wed, 2007-07-25 at 19:19 -0700, David Wagner wrote:
> I agree that powerboxes should grant transient capabilities.  I do not
> agree that it follows that object capability systems must never admit
> even the possibility of a durable capability.  That doesn't follow.

Indeed. In such a system, how would the power box obtain its
capabilities?
-- 
Jonathan S. Shapiro, Ph.D.
Managing Director
The EROS Group, LLC



More information about the cap-talk mailing list