capability-based security
A security model in which possession of a capability, such as a link or token, confers access rights without identity verification or a centralized authority. Its characteristics are minimalism, offline operation and decentralization, but capabilities cannot be revoked.
Timeline (last 90 days)
The URL-as-file model is closer in security theory to capability-based security: holding the link is itself the permission, and knowing the URL equals having access rights, with no identity verification and no centralized authority needed.
The cost of the capability-based security model is that it cannot be revoked: once a link is copied or leaked, the grantor loses any means of taking it back.
All Facts (2)
The URL-as-file model is closer in security theory to capability-based security: holding the link is itself the permission, and knowing the URL equals having access rights, with no identity verification and no centralized authority needed.
50%UnverifiedThe cost of the capability-based security model is that it cannot be revoked: once a link is copied or leaked, the grantor loses any means of taking it back.
50%