From: Tyler Close <>
Date: Wed, 4 Dec 2002 12:11:21 -0400
Subject: Re: [e-lang] "Capability Myths Demolished" (was: Software security workshop)

On Wednesday 04 December 2002 12:14, Jonathan Shapiro wrote:
> First, the Lampson defintion *does* combine designation and authority.

Where in the Lampson paper is an <x, Adx> pair ever *used* for

> A Lampson capability is an (object-designator, rights) pair in
> the Lampson paper. Second, the definition of the term comes from
> Dennis and van Horn, who are quite clear that designation is
> critical.

Lampson understood the content of a capability, but not the *use*
of a capability.  If you believe otherwise, please quote from the
"Protection" paper. The paper is quite clear on the runtime
exchange of information.

e-lang mailing list