Types of Cloaking

There are two types of cloaking: static cloaking and dynamic cloaking:

• With static cloaking (EOAC_STATIC_CLOAKING), the server sees the thread token from the first call from a client to the server. For the first call, if the proxy identity was previously set during a call to CoSetProxyBlanket, that proxy identity is used. However, if the proxy identity has not been previously set, the thread token is used. If no thread token is present, the process token is used. For all future calls, the identity set on the first call is used.
• When dynamic cloaking (EOAC_DYNAMIC_CLOAKING) is set, on each call the current thread token (if there is a thread token) is used to determine the client's identity. If there is no thread token, the process token is used. This type of cloaking is extremely expensive.