porting CCAPI to UNIX

[Nicolas Williams]

On Wed, May 09, 2007 at 02:32:27PM -0400, Ken Hornstein (Contractor) wrote:
> >I would not call it crazy, it looks interesting. But how could you
> >formalize the method, so that other applications could use the same
> >method.
> 
> I'm not sure I'd want to formalize this particular scheme.  What I would
> want is vendors to provide a mechanism we can use to build a credential
> storage system that provides the same semantics.

In particular I get the impression that Ken needs something stronger
than Linux keyrings and AFS PAGs have tended to provide: cross-session
process isolation.