[cap-talk] Capability analogies

[Jed Donnelley]

On 10/4/2007 4:28 PM, Mark Miller wrote:
> On 10/4/07, Jed Donnelley <jed at nersc.gov> wrote:
>> I believe if I was to update that paper to include
>> confinement then the issues would be similar to those
>> faced by the 'CapBrowser'.
> 
> DarpaBrowser?

I don't believe the DarpaBrowser is a capability
browser in the sense I described.  As I understand
it, the DarpaBrowser can view a URL like

http://www.google.com/

A confined capability browser could not because
such a string doesn't grant the permission to
communicate on any network.  I don't believe
the DarpaBroswer is confined - is it?  I thought
it's intent was something else (e.g. protecting
against untrustworthy plugins).  If I missed that
then I'd like to hear more about it.

I admit I'm playing rather loose with this
ill defined concept (CapDoc, CapBrowser).

Perhaps better discussed off the list?

--Jed  http://www.webstart.com/jed/