Re: some capability queries

Sorry for the long delay in responding again.  I had some actual work to do.

Jithu Joseph wrote:
> 
> 6. There is this really nice concept of delegation ... however in most
> of recent systems , I have only seen the confinement / sandboxing of
> this. Delegation is mostly between the ambient parent and the sandbox
> . Can you point me to some systems which use delegation more
> concretely among multi-parties so that i can understand this better.
>
OAuth 2 bearer tokens can be used as capabilities, so much of the work on OAuth 2, e.g., [1], and UMA (User Managed Access) [2] is relevant.  Unfortunately, there is still no spec for what they call re-delegation (chaining), but I'll learn more about it at the next IIW in April.

[1] https://www.digitalocean.com/community/tutorials/an-introduction-to-oauth-2 
[2] https://kantarainitiative.org/confluence/display/uma/Home 

________________________
Alan Karp
Principal Scientist
Enterprise Services, Office of the CTO
Hewlett-Packard Company
1501 Page Mill Road
Palo Alto, CA 94304
1 (650) 386-4568
http://www.hpl.hp.com/personal/Alan_Karp