Agoric opaque box
From Erights
(Difference between revisions)
(adding rebuttal to critism of agoric opaque boxes) |
m |
||
| (2 intermediate revisions not shown) | |||
| Line 8: | Line 8: | ||
The boxes need not to trust each other. Only the developers need to trust an brand of an opaque box. | The boxes need not to trust each other. Only the developers need to trust an brand of an opaque box. | ||
Therefore what trust between two brands of opaque boxes is inhertenly based on the trust of the developer | Therefore what trust between two brands of opaque boxes is inhertenly based on the trust of the developer | ||
| - | that programmed an system that could span them | + | that programmed an system that could span them in these brands. |
Latest revision as of 01:04, 15 March 2009
The concept is introduced in Agoric Open Systems: Agoric Systems in the Large - Section 6.1.2 Hardware Encapsulation
It is criticised in Against opaque boxes
Reasoning of that post was rebutted on #erights on irc.freenode.org .
The rebuttal was somewhat like this:
The boxes need not to trust each other. Only the developers need to trust an brand of an opaque box. Therefore what trust between two brands of opaque boxes is inhertenly based on the trust of the developer that programmed an system that could span them in these brands.
