3 ms·
In re: E and capabilities, see also "macaroons": > This paper introduces macaroons: flexible authorization credentials for Cloud services that support decentra
by carapace 6y ago
In re: E and capabilities, see also "macaroons":
> This paper introduces macaroons: flexible authorization credentials for Cloud services that support decentralized delegation between principals. Macaroons are based on a construction that uses nested, chained MACs (e.g., HMACs) in a manner that is highly efficient, easy to deploy, and widely applicable.
> Although macaroons are bearer credentials, like Web cookies, macaroons embed caveats that attenuate and contextually confine when, where, by who, and for what purpose a target service should authorize requests.
https://research.google/pubs/pub41892/ https://research.google/pubs/pub41892/