[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

FW: Delegate






You and Donald Eastlake have both advocated the integer depth.
BTW, SET certs include a certification depth allowance.

Bingo! if SET has it then I suggest that SPKI follows suit.
Otherwise it will be difficult for SPKI certs to delegate
to SET certs or vice versa...

Can you come up with more words about how the integer simplifies
auditing?  ...or other advantages the integer would have?

 Basically give the minons less rope to hang you with. If you
know that you have only permitted delegation to a depth of 3 
you know that the number of phone calls you have to make is
limited. If you allow unlimited depth delegation then in an
audit type situation you could find youself debugging a 
very very long chain of command.


		Phill


Follow-Ups: