[cap-talk] Google Chrome - web browser with sandboxed rendering

[James A. Donald]

James A. Donald:
>> Hence the powerbox user interface model of piggybacking permission on
>> designation.

Ben Laurie wrote:
> This particular assertion is beginning to really bug me. Designation
> works fine for files, maybe, and for drag'n'drop, even more maybe (are
> you granting read? write? a communications channel? is it permanent or
> temporary? etc). But I've yet to see any evidence that it makes any
> sense at all in the context of, for example, sockets.

Wrong abstraction level.

One does not grant permissions on sockets, but on urls.