Ben Laurie wrote: > Fair enough. Nevertheless, this is something you can't defend against in > a distributed capability system, which was my point. IIRC. Yes you can. A distributed capability system can use an encrypted transport to transmit capabilities between runtimes. Jonathan