Ben Laurie wrote: > Furthermore, in a distributed capability > system, then capabilities are inherently forgeable, aren't they? This is what public key crypto/signature is for. It's one of the reasons that EROS capabilities at the OS level are intentionally not designed to be distributed without an additional layer. Jonathan