search

ucan-wg / spec

User Controlled Authorization Network (UCAN) Specification
https://ucan.xyz
Other
197 stars 18 forks source link

Caveats are restrictions, yet empty Caveats mean "nothing's allowed" #170

Open andrewzhurov opened 1 year ago

andrewzhurov commented 1 year ago

This feels contrary to what Caveats are meant to express.

Both

{"dns:example.com?TYPE=TXT": {
    "crud/create": [{}]
  }}

and

{"dns:example.com?TYPE=TXT": {
    "crud/create": []
  }}

Intuitively, to me, mean that nothing's restricted. Whereas if somebody wish to express "nothing's allowed" they could simply not include the capability in the first place.