[cap-talk] Need help with the confused deputy problemand Object-capability model

[Pan Liu]

Thank you for your help. 

Could you answer me another question? Since the confused deputy problem is mainly because of the separation of designation and authority, but do you think that the excess authority is also a reason for that?

Thanks

Ricky
----- Original Message ----- 
From: "Toby Murray" <toby.murray at comlab.ox.ac.uk>
To: "General discussions concerning capability systems." <cap-talk at mail.eros-os.org>
Sent: Wednesday, May 21, 2008 5:20 PM
Subject: Re: [cap-talk] Need help with the confused deputy problemand Object-capability model


> On Wed, 2008-05-21 at 16:03 -0700, Mark Miller wrote:
>> On Wed, May 21, 2008 at 3:48 PM, Toby Murray
>> <toby.murray at comlab.ox.ac.uk> wrote:
>> > No, I disagree. We're in the object-capability model here, not a
>> > capability-based OS.
>> 
>> We are in agreement on all substantive issues. And your use of
>> terminology does correctly correspond to ocap terminology, while mine
>> does not. However, since the issue is one of clearing up a possible
>> confusion, I wanted to ensure that the explanation was not delicately
>> and non-obviously resting on a terminological fine-point.
> 
> Good point. The purpose was meant to be to explain, not to split fine
> hairs for the sake of correctness. Thanks for reminding me.
> 
>