[cap-talk] What Horton can do: accountability in cap systems.

[Jed Donnelley]

At 11:16 PM 6/2/2007, Karp, Alan H wrote:
>Jed wrote:
> >
> > When you say "With capabilities, there is nobody to control
> > delegations.",
> > what about when using Horton on top of an object/capability system?
> > In that case if people play the Horton game, then I believe they
> > can leave enforcement of such policies to an administrative system.
> >
>Only if Carol knows the policy.

Or if Carol works with some system that does - e.g. the sort of fourth
party that you mention can be used with an ACL system:

>An ACL system uses a fourth party, one
>presumed to have more information, to control delegations.

--Jed  http://www.webstart.com/jed-signature.html