[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Other *-forms for dates and times, and love

> Hm.  I'm thinking that someone _might_ actually invent a
> tag-intersection rule that can't be codified in a Java program.
> Something like "I hereby delegate my telnet capability to all those
> people mentioned in the original certificate whom I love.".  :-)
> Or "I delegate the authority to execute all of the programs 
> mentioned in the original certificate as long as they terminate.".
> :-)

Or any language at all, except where you had enumerated or otherwise
expressed the set of "whom I love" or "they terminate".  This would likely
be in other certificates, and you have the PolicyMaker option to merge them.
This is, of course, a very different thing from chains from issuer to subject,
but a combination of privileges to yield another implied privilege, subject
to a stated policy (in another cert, most likely).  This is among the things
I found so wonderful about PolicyMaker.


Brian Thomas, CISSP - Distributed Systems Architect  bt0008@entropy.sbc.com
Southwestern Bell                                    bthomas@primary.net
One Bell Center,  Room 34G3                          Tel: 314 235 3141
St. Louis, MO 63101                                  Fax: 314 235 0162