[cap-talk] Zooko/yurl terminology

Mark Miller erights at gmail.com
Sat Aug 16 16:35:25 CDT 2008


On Fri, Aug 15, 2008 at 7:58 PM, James A. Donald <jamesd at echeque.com> wrote:
> First let us make sure we mean the same thing by trusted path and the Y
> property.
>
> To me, trusted path means that you login by the chrome, rather than an
> unauthenticated web page, and you click on a bookmark, not a link in an
> unauthenticated email.


That is the dominant use of "trusted path", yes. However, I meant
something more like Ping's usage at
<http://people.ischool.berkeley.edu/~ping/sid/> which is consistent
with your generalization below:


> The Y property is that a nickname an authenticated communication is

"nickname an authenticated communication" -> "self-authenticating name
for a communications channel"

> securely connected to a particular entity - that when Ann tells Bob
> about Joe, Bob can then contact the particular Joe that Ann is talking
> about, and not be bamboozled into contacting some other Joe.

Yes, exactly.


> So if one has trusted path with Y property, one starts with a bookmark
> that has security properties that get you authenticated information from
> Ann, which is a secure path to Ann.  Ann refers to Joe, and now one has
> a secure path to that particular Joe.

"secure path" -> "trusted path" yes.

-- 
Text by me above is hereby placed in the public domain

 Cheers,
 --MarkM


More information about the cap-talk mailing list