Re: [Caja] Important new paper: The Need for Capability Policiies

On Thu, July 11, 2013 17:29, Mark Miller wrote:
> On Thu, Jul 11, 2013 at 7:41 AM, Ben Laurie <[email protected]> wrote:
>
>> On 11 July 2013 14:51, Shriram Krishnamurthi <[email protected]> wrote:
>> > inside every Web-based cap program is an ACL struggling to be heard.

Hmm, I would actually say that inside every web-credential/acl there is a
decompose tree of attenuable and authority waiting to be allowed to be
conveniently delegated and revoked using capabilities.

B.t.w, does this list honor any 'don't archive' mail headers? I think the
slides to an upcoming talk of mine may be relevant to this discussion, I
would like to share it with the list, but I don't want to make them
available yet through Google (searching my name of that of my talk) for
people not on the list that are going to be visiting the event.


>> > (I even once saw erights write a program that had a hand-coded ACL in
>> > it.)
>>
>
> Indeed. Horton can be seen this way.
>
>
>
>>
>> My position is that ultimately you have to resort to policy, and
>> policy can be expressed in various ways - for example, "ask the user"
>> is a popular one, but ACLs are certainly a viable alternative. I
>> believe I said as much in http://www.links.org/files/capabilities.pdf.
>>
>> > The difference between ACLs and the kinds of policies in this paper is
>> > that these look to me for the most part to be traditional program
>> > *properties*. In contrast, policy languages are part of the active
>> > execution of the program, usually as a callout to some policy
>> > decision/enforcement agent.
>>
>
> Do you have a positive example?
>
>
>
>> >
>> > Shriram
>>
>> --
>>
>> ---
>> You received this message because you are subscribed to the Google
>> Groups
>> "Google Caja Discuss" group.
>> To unsubscribe from this group and stop receiving emails from it, send
>> an
>> email to google-caja-discuss+unsubscribe-/JYPxA39Uh5TLH3MbocFF+G/[email protected]
>> For more options, visit https://groups.google.com/groups/opt_out.
>>
>>
>>
>
>
> --
> Text by me above is hereby placed in the public domain
>
>   Cheers,
>   --MarkM
> _______________________________________________
> e-lang mailing list
> [email protected]
> http://www.eros-os.org/mailman/listinfo/e-lang
>