github.com/jlmucb/cloudproxy@v0.0.0-20170830161738-b5aa0b619bc4/go/support_infrastructure/secret_service/README.md (about)

     1  The CPSecretService maintains a database of domain rooted keys which are epoch qualified.
     2  Each such key has an ACL list consisting of (ProgramName, Property).  Properties are Read,
     3  Write, Create.  The service accepts requests for programs over Tao Channels requesting
     4  keys operations by name and satisfies the request if it is authorized.
     5  
     6  Each CPSecretService service usually provides these key services for a single "zone."
     7  
     8  All service requests and responses are logged.
     9  
    10