Request for comments: capability security for Web applications | Hacker News Reader