[cap-talk] Webkeys vs. the web

[Raoul Duke]

> The URL that is in the browser's address bar is dangerous because users
> share it with the expectation that it, by itself, conveys no authority.
> Thus any URLs that *do*, by themselves, convey authority must not be
> displayed in a browser's address bar.

if that is the case, it doesn't seem strong enough to me, because it
seems like the danger is arbitrarily great. packet sniffers can get
those plain text caps no problem, no?

sincerely.