[E-Lang] draft statement of consensus
Mark S. Miller
Tue, 06 Feb 2001 12:29:44 -0800
>> I would love to set up a MLS system where code downloaded by my web
>> was restricted. Some restrictions I would like include:
>> * No way can it read my address book. (Ditto for email messages.)
>> * No way can it schedule system startup tasks.
>> * No way can the code be executed outside these restrictions.
At 11:14 AM Tuesday 2/6/01, Marc Stiegler wrote:
>My Capzilla browser, when launching caplets, already achieves these goals,
>and I don't even know what MLS is :-) So if this is a good example, then I'd
>guess you can do it with pure capabilities :-)
This is an excellent example of the problem I've had understanding what MLS
is *for*. All the non governmental examples seem like stuff you can do with
just capabilities, without ever thinking "MLS".