3 ms·
Do you know of any proposals for browsers to directly use capabilities? Servers can implement a strict capability model for server-side objects but the browser
by benlivengood 5y ago
Do you know of any proposals for browsers to directly use capabilities?
Servers can implement a strict capability model for server-side objects but the browser's granularity for a capability owner is almost useless.
To be fair, no popular operating system makes much of a distinction between the human operator, the operator's actions via I/O, the behavior of applications ostensibly started by the user, and various other automatically started software, so at least browsers provide the concept of a domain for separate ownership.
- anaphor 5y agoThe most promising things I know of are Google Fuchsia (which is a mobile OS), and Goblins, which is a Scheme library for doing distributed programming. There is something called Realms which is being worked on for JS, but I haven't dug into it too deeply yet. It might provide a good foundation for building ocaps into the browser, though. https://github.com/tc39/proposal-realms https://github.com/tc39/proposal-realms https://en.wikipedia.org/wiki/Google_Fuchsia https://en.wikipedia.org/wiki/Google_Fuchsia https://docs.racket-lang.org/goblins/index.html https://docs.racket-lang.org/goblins/index.html