[cap-talk] erights wiki : ambient authority

David-Sarah Hopwood david-sarah at jacaranda.org
Fri Jun 19 13:31:43 EDT 2009


Karp, Alan H wrote:
> David-Sarah Hopwood wrote:
>> Indeed a non-ambient authority system does not preclude confused deputy.
>> It only solves the problem that makes writing unconfusable deputies
>> impossible when they use only ambient authority.
>
> How would you write an unconfusable deputy for my example where Alice
> says cc(r:foo.c,w:log.txt)?

That's using ambient authority system, so I'm not sure how it relates
to my statement above?

-- 
David-Sarah Hopwood  ⚥  http://davidsarah.livejournal.com




More information about the cap-talk mailing list