> Manual revocation, based on some user interface to a database that
> remembers all capabilities that have been granted (and metadata about
> the principal they were granted to, the context, etc.), would in most
> cases be far preferable.

pardon me for stating the obvious follow on, but i will:

and one could build the time expiry feature on top of that, if such
need really exists.

sincerely.
_______________________________________________
tahoe-dev mailing list
[email protected]
http://allmydata.org/cgi-bin/mailman/listinfo/tahoe-dev

Reply via email to