2019-02-24 UTC
# 
fr33domlover see which capabilities they have granted, the server has a list of them anyway! Not necessarily the JSON objects, just the IDs, the invoker and caveats. So, if I send an invocation, in which the capability is specified as a URI, like in the OCAP-LD spec, the server can check it against its DB, and the signed delegation document never even needs to exist at all! That both saves network usage, and relieves