Re: Reliability of RPC services

[Marcus Brinkmann]

At Tue, 25 Apr 2006 10:32:36 +0200,
"Michal Suchanek" <address@hidden> wrote:
> > Concerning "reusable vs. send once": All reply capabilities are
> > invalidated by send. This is necessary in order to guarantee that every
> > call receives at most one reply. This is, in fact, the *only* difference
> > between a reply capability and a send capability.
> 
> How is it invalidated by send if there are multiple copies? Who finds
> all the copies to invalidate them?

This works by incrementing the payload in the object the capability
points to and requiring a payload match (the payload will be
different).

So, what Jonathan says is only true at the abstract level for Coyotos:
The way reply capabilities are implemented using the payload match
they can be used several times, until the client changes the payload.
In fact, they can be reused at a later time if the client would change
back the payload again.

Thanks,
Marcus