Title: Explanation - Capability model Hal - It sounds like we are in agreement. I believe the thing that is defining of a "capability" policy is not that it is conveyed in a bearer token (otherwise, a digital certificate would certainly not qualify), but that it is identified with the subject (rather than the resource) and describes the things that the subject is "capable" of doing. I have no interest in pursuing this model. And if all in the group feel the same way (as you appear to), then I suggest that we not address the capability model in our work. All the best. Tim. ----------------------------------------- Tim Moses Tel: 613.270.3183