2019-02-24 UTC
# 
cwebber2 fr33domlover: you're right that in order for a server to revoke a capability, it needs to see it... though it could not hold onto it normally, and then upon seeing the capability abused, decide to revoke it, in which case it decides having seen it recently presented. But you're right that that's one way to do it.