Limits: Web Clients
Unprincipled
- Does not adapt behavior to specific site IE4 Zones
- Requires trusting monolithic sw vendor instead of self
- Not carefully integrated with OS: cache leaks, cookies
Principal identification scattered
- Desktop PCs & Macs have a weak concept of User
- User interface hides computer address ó spoofable
- Organizational identification relies on images, DNS
Inflexible Policies
- Content-filtering, applet, and privacy checks built-in