[cap-talk] Announcing "Analysing Object-Capability Security" Paper and Authodox v. 0.2.0

[Mark Miller]

On Thu, May 22, 2008 at 3:57 PM,  <lists at notatla.org.uk> wrote:
> The description that goes with Figure 1 b) uses verbs rather like
> telling a story as opposed to merely describing an established layout.
>   "We instantiate the ReadOnlyForwarder ... We then instantiate
>   the RevocableForwarder ... Finally, we also give Alice
>   a direct reference to Fred."
> But if this is in story form I would have thought that the order is
> backwards (direct access to the file coming last etc) and Alice
> should be doing the work while "we" watch.


I had a similar reaction to the story. I would have had Alice start
with full authority, and then explain how Alice can dispense
attenuated authority to the other players.


-- 
Text by me above is hereby placed in the public domain

 Cheers,
 --MarkM