[E-Lang] draft statement of consensus

[Mark S. Miller]

>Bill wrote:
>> I would love to set up a MLS system where code downloaded by my web
>browser
>> was restricted.  Some restrictions I would like include:
>>
>> * No way can it read my address book.  (Ditto for email messages.)
>> * No way can it schedule system startup tasks.
>> * No way can the code be executed outside these restrictions.

At 11:14 AM Tuesday 2/6/01, Marc Stiegler wrote:
>My Capzilla browser, when launching caplets, already achieves these goals,
>and I don't even know what MLS is :-) So if this is a good example, then I'd
>guess you can do it with pure capabilities :-)


This is an excellent example of the problem I've had understanding what MLS 
is *for*.  All the non governmental examples seem like stuff you can do with 
just capabilities, without ever thinking "MLS".


        Cheers,
        --MarkM