Re: cap exchange race with map/unmap

[Neal H. Walfield]

At Wed, 19 Oct 2005 18:02:21 +0200,
Marcus Brinkmann wrote:
> However, just for completeness, there is another way to avoid the
> problem, and that is to never copy the capability in the first place.
> Instead, you just make revocable copies all along the way of the
> operation you intend to perform, as arguments to RPCs to trusted
> objects.  This is also problematic, however (performance, breaking
> abstraction).

Good point.

Thanks,
Neal