Re: A new type of phishing attack

"Karp, Alan H" <[email protected]>
Newsgroups gmane.comp.capabilities.general
Message-ID <8AD823089998C849A832D86972E69CD54191F9EF@G4W3222.americas.hpqcorp.net>
MarcS wrote:
> 
> It is perhaps worth noting that another approach, rather straightforward in its
> implementation given a suitable infrastructure, is to have Ann manufacture a
> new, separately revocable, separately accountable, capability for Bob

If Alice asks Dave to create this new capability for Bob, and if Dave has independent knowledge of Bob, then Dave can deliver the new capability to Bob, either directly or in a sealed box via Alice.  When the capability gets used, Dave can be sure that Bob is using it, not Alice.  This is the essence of Horton.

________________________
Alan Karp
Principal Scientist
Enterprise Services, Office of the CTO
Hewlett-Packard Company
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
http://www.hpl.hp.com/personal/Alan_Karp
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.