[cap-talk] A paper on web-keys

[Karp, Alan H]

Toby Murray wrote:
>
> Is there any evidence, one way or another, to indicate
> whether even this
> amount of work is too much for users to handle?
>
If it is, then they can't do the job under any system because it's too much work for them to say what they want to delegate.  In this scenario, the user has to say what to delegate and to whom no matter how secure or insecure the underlying mechanism.

Our motto is "At the very worst, no additional clicks when adding security."  This example achieves this goal.  In other cases, such as Polaris and Passpet, adding security reduces the number of clicks, much to the surprise of many people.

________________________
Alan Karp
Principal Scientist
Virus Safe Computing Initiative
Hewlett-Packard Laboratories
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
http://www.hpl.hp.com/personal/Alan_Karp