Backing up one more step...

[William S. Frantz]

> Except that in general one has no proof that one is speaking directly
> to a factory, and the KeyKOS kernel sees the factory as just another
> program; there is nothing "special" about it that would tip us off
> that it is safe.

One of the features of factories is that one factory knows that another
factory is indeed a factory.  You need a factory in the local region
that you trust to verify other factories.

Since factories are quite static beasts, share or don't share them
as meets your needs.  For factories in the "public directory", there
seems no problem in making all copies of the one with the name "ZOT"
the same, as some level of abstraction.

-----------------------------------------------------------------
Bill Frantz                   Periwinkle  --  Computer Consulting
(408)356-8506                 16345 Englewood Ave.
frantz@netcom.com             Los Gatos, CA 95032, USA