Re: Authority verification

2009-05-21 Thread olafBuddenhagen
Hi, On Fri, Apr 24, 2009 at 04:50:56PM +0200, Carl Fredrik Hammar wrote: > On Fri, Apr 24, 2009 at 08:48:34AM +0200, olafbuddenha...@gmx.net > wrote: > What would have been a more appropriate problem to describe, would > have been that if equality test were to be done in the sender (or the > rece

Re: Authority verification

2009-04-24 Thread Carl Fredrik Hammar
Hi, On Fri, Apr 24, 2009 at 08:48:34AM +0200, olafbuddenha...@gmx.net wrote: > [snip] > > > Note also that it's possible for the sender to trick the receiver to > > use objects the sender itself does not have access to, in ways they > > are not expected to be used. Possibly leading to precious da

Re: Authority verification

2009-04-24 Thread olafBuddenhagen
Hi, On Thu, Apr 23, 2009 at 02:46:10PM +0200, Carl Fredrik Hammar wrote: > I guess this mail turned out to be more of a report on my findings > rather than to start a discussion. So I'm mostly looking for > feedback, e.g. if what I'm saying doesn't make sense, if one of my > assumptions are wron