[cap-talk] Confused deputies in hybrid systems

[Jonathan S. Shapiro]

On Tue, 2008-02-05 at 01:07 +0000, David Hopwood wrote:
> Jonathan S. Shapiro wrote:
> > From first principles, it seems necessary that his position must rely on
> > the assumption that a security-sensitive programs will be implemented
> > with less care than the same program in a pure capability system. I see
> > absolutely no reason to accept this supposition.
> 
> I do not see anywhere I made such an assumption, which would indeed be
> unjustified...

Subsequent to my note, I caught up on some of the discussion noting that
deputies can become confused in capability systems. In light of that
discussion, my comment above is clearly wrong.


shap