Capability

• If Directories and ACLs are difficult to maintain then maybe it would be easier to place the burden of authentication on the user instead of the operating system.

• A capability is unforeable token that gives the possessor some sort of rights to an object.

  • Randomized/timestamped cookies

• Umm... Unforgeable??...