Objects as Secure Capabilities

1 · Joe Duffy · Nov. 11, 2015, 12:03 a.m.
Last time, we saw how Midori built on a foundation of type, memory, and concurrency safety. This time, we will see how this enabled some novel approaches to security. Namely, it let our system eliminate ambient authority and access control in favor of capabilities woven into the fabric of the system and its code. As with many of our other principles, the guarantees were delivered “by-construction” via the programming language and its type system. Capabilities First and foremost: what the heck a...