[cap-talk] caps tried and rejected for AMQP

[Karp, Alan H]

Sandro Magi wrote:
> 
> I only have a second to reply, but Mark Miller, Jed Donnelly and Alan
> Karp devised just such an ACL-over-caps system, called Horton:
> 
> http://www.erights.org/elib/capability/horton/
>
Horton is only half the story.  You also need to wrap clients that think they're using an authentication based approach.  In our e-speak implementation, which used SPKI certificates as capabilities, we were able to use a generic wrapper for about 3/4 of the applications.  One of those was integrating IBM MQ Series reliable messaging with e-speak.

Another issue is getting buy-in from sysadmins who want ACLs.  Surprisingly, that's a challenge, even though using capabilities reduces their workload.

________________________
Alan Karp
Principal Scientist
Virus Safe Computing Initiative
Hewlett-Packard Laboratories
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
http://www.hpl.hp.com/personal/Alan_Karp