[cap-talk] Confused deputies in hybrid systems
Jonathan S. Shapiro
shap at eros-os.com
Tue Feb 5 10:46:37 EST 2008
On Tue, 2008-02-05 at 01:07 +0000, David Hopwood wrote:
> Jonathan S. Shapiro wrote:
> > From first principles, it seems necessary that his position must rely on
> > the assumption that a security-sensitive programs will be implemented
> > with less care than the same program in a pure capability system. I see
> > absolutely no reason to accept this supposition.
> I do not see anywhere I made such an assumption, which would indeed be
Subsequent to my note, I caught up on some of the discussion noting that
deputies can become confused in capability systems. In light of that
discussion, my comment above is clearly wrong.
More information about the cap-talk