[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Translucency counterexample
From: |
Anton Tagunov |
Subject: |
Re: Translucency counterexample |
Date: |
Fri, 12 Jan 2007 12:22:31 +0300 |
User-agent: |
Thunderbird 1.5.0.9 (Windows/20061207) |
Hi,
J> The ability to extract the brand capability means that
J> I can violate the integrity of the process type system. If this
J> integrity is violated, the foundational chain of trust is broken because
J> even the *primordial* servers cannot be reliably identified.
Been bugging me a long time...
Doesn't existence of process type system
preclude "field replaceability"?
If any process is able to check "identity" of other
process it can refuse to work with replacement implementation right?
Anton