2 ms·

It’s interesting this doesn’t make any mention of object-capability security.

• p_l 5y ago
  to be honest, most object-capability security models I've seen ultimately form a precomputed instance of the models described in the article - they are the implementation detail where simpler capability system replaces the complex matrices of ACLs etc.
  • geocar 5y ago
    That's my observation as well, but I think this is a shame: It has tremendous advantages for principle security (i.e. the security of the owner of the data, as opposed to the security of the owner of the database). For example: I have a helpdesk, where I need operators to be able to look up the details of users, but only when the user requests it. My users compute the capability string and give it to the helpdesk operator (who cannot merely give it to other helpdesk operators- they have to compute a new capability string showing the chain of custody).
• rapnie 5y ago
  Some very interesting work is being done on this front, like the Spritely Project by W3C ActivityPub recommendation co-author Christopher Lemmer Webber: https://spritelyproject.org/ https://spritelyproject.org/