Re: [Caja] Important new paper: The Need for Capability Policiies

On Thu, Jul 11, 2013 at 4:07 PM, Rob Meijer <rmeijer-qWit8jRvyhVmR6Xm/[email protected]> wrote:

> On Thu, July 11, 2013 17:29, Mark Miller wrote:
> > On Thu, Jul 11, 2013 at 7:41 AM, Ben Laurie <[email protected]> wrote:
> >
> >> On 11 July 2013 14:51, Shriram Krishnamurthi <[email protected]> wrote:
> >> > inside every Web-based cap program is an ACL struggling to be heard.
>
> Hmm, I would actually say that inside every web-credential/acl there is a
> decompose tree of attenuable and authority waiting to be allowed to be
> conveniently delegated and revoked using capabilities.
>
> B.t.w, does this list honor any 'don't archive' mail headers? I think the
> slides to an upcoming talk of mine may be relevant to this discussion, I
> would like to share it with the list, but I don't want to make them
> available yet through Google (searching my name of that of my talk) for
> people not on the list that are going to be visiting the event.
>

I know of no such mechanism, so assume not.




>
>
> >> > (I even once saw erights write a program that had a hand-coded ACL in
> >> > it.)
> >>
> >
> > Indeed. Horton can be seen this way.
> >
> >
> >
> >>
> >> My position is that ultimately you have to resort to policy, and
> >> policy can be expressed in various ways - for example, "ask the user"
> >> is a popular one, but ACLs are certainly a viable alternative. I
> >> believe I said as much in http://www.links.org/files/capabilities.pdf.
> >>
> >> > The difference between ACLs and the kinds of policies in this paper is
> >> > that these look to me for the most part to be traditional program
> >> > *properties*. In contrast, policy languages are part of the active
> >> > execution of the program, usually as a callout to some policy
> >> > decision/enforcement agent.
> >>
> >
> > Do you have a positive example?
> >
> >
> >
> >> >
> >> > Shriram
> >>
> >> --
> >>
> >> ---
> >> You received this message because you are subscribed to the Google
> >> Groups
> >> "Google Caja Discuss" group.
> >> To unsubscribe from this group and stop receiving emails from it, send
> >> an
> >> email to google-caja-discuss+unsubscribe-/JYPxA39Uh5TLH3MbocFF+G/[email protected]
> >> For more options, visit https://groups.google.com/groups/opt_out.
> >>
> >>
> >>
> >
> >
> > --
> > Text by me above is hereby placed in the public domain
> >
> >   Cheers,
> >   --MarkM
> > _______________________________________________
> > e-lang mailing list
> > [email protected]
> > http://www.eros-os.org/mailman/listinfo/e-lang
> >
>
> _______________________________________________
> e-lang mailing list
> [email protected]
> http://www.eros-os.org/mailman/listinfo/e-lang
>



-- 
    Cheers,
    --MarkM

_______________________________________________
e-lang mailing list
[email protected]
http://www.eros-os.org/mailman/listinfo/e-lang