[cap-talk] What Horton cannot do? (Was: mailkey: transfer of accountability...)

Karp, Alan H alan.karp at hp.com
Wed Jun 6 18:06:35 EDT 2007


Rob Meijer wrote:
> 
> It may be just semantics, but would it not be relevant to distinguish
> between the Alice 'entity' and the Alice 'namespace' (from the invoked
> object (Carol?) point of view that is)?
> Without any 'further' information on Bob, Bob would have to 
> be considered
> Alice::Bob by the invoked object, and as long as it can be shown that
> Alice::Bob != Alice, abuse by Alice::Bob would be accountable to
> Alice::Bob
> as an entity within the Alice name space rather than to the 
> Alice entity
> IMO. You could than say that if at a later time it is shown that for
> example
> Alice:Bob == Dick::Bob, bob could be lifted from the Alice 
> name space to
> the local name space, removing accountability for usage (not for
> delegation) from the Alice name space.
> 
This paragraph is a precise statement of on of the points I was trying
to make.  The only correction I have is that I used the word "entity" as
the thing that controls the fire alarm because that's the term James
Donald used in his example.

________________________
Alan Karp
Principal Scientist
Virus Safe Computing Initiative
Hewlett-Packard Laboratories
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
https://ecardfile.com/id/Alan_Karp
http://www.hpl.hp.com/personal/Alan_Karp
  



More information about the cap-talk mailing list