Tag
ambient-authority
- Aug 5, 2026 Capability References and the Absence of Ambient Authority Why naming a resource by path or file descriptor grants more than the caller needs, and how unforgeable references make authority a property of what a program holds rather than who it claims to be. language runtimes
- Apr 29, 2025 Cross-Site Request Forgery and the Problem of Ambient Authority Why a browser attaches cookies to requests it did not intend to make, which request shapes are reachable without a script, and how token binding restores an intent check. security