Protecting the Agent
Cannot protect a program from its processor.
Must authenticate the engine.
Total system authentication:
- Each software layer authenticates the layers above it.
- Boot ROM has secret key.
- Boot ROM authenticates OS.
- OS authenticates interpreter.
- Scripts can then trust the interpreter.
Simpler solution: trusted sites.
Tcl/Tk is not addressing this issue (yet).