[cap-talk] What Horton can do: accountability in cap systems.

[Karp, Alan H]

Jed wrote:
> 
> When you say "With capabilities, there is nobody to control 
> delegations.",
> what about when using Horton on top of an object/capability system?
> In that case if people play the Horton game, then I believe they
> can leave enforcement of such policies to an administrative system.
> 
Only if Carol knows the policy.  An ACL system uses a fourth party, one
presumed to have more information, to control delegations.

________________________
Alan Karp
Principal Scientist
Virus Safe Computing Initiative
Hewlett-Packard Laboratories
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
https://ecardfile.com/id/Alan_Karp
http://www.hpl.hp.com/personal/Alan_Karp