It's great to see object-capability security being discussed on here! Mark Miller, Ben Laurie, and Mark Lentczner are working on how to apply this 1980s research in a web context at
https://sites.google.com/site/belayresearchproject/ under the name "Belay". They're still in early stages...