Skip to main content

Composing capability security and CRDTs

K.3.201 | Day 2 | 14:05 - 14:20 | Speakers: David Thompson

Composing capability security and CRDTs
A picture of a devroom at FOSDEM 2024
Open in browser
Get involved in the conversation!Join the chat

Notes

Abstract

CRDTs allow for decentralized replication of data. Capability security allows for decentralized control over behavior. Local-first applications often use access-control list (ACL) security which has significant downsides versus capabilities, especially in a decentralized context. In this talk, I'll examine how CRDTs and capabilities can be composed to improve the security of local-first applications using a group chat prototype as a case study.

Speakers

David Thompson

David is the CTO at the Spritely Institute, a US-based nonprofit working on decentralized networking technology for safe collaboration. At Spritely, he works on Goblins, a capability-secure distributed programming environment, and Hoot, a Scheme to WebAssembly compiler and general-purpose WebAssembly toolchain. He is a longtime contributor to the Guile and Guix projects and the author of software such as Haunt, a purely functional static site generator.


Notice: The placeholder video image is licensed under CC BY-SA 4.0. The original image can be found hereChanges made to the image are: Cropped the image to a new ratio, part of the image was cut off.