Home. 
.

transparent

transparent

transparent

Altova Mailing List Archives


Re: [xml-dev] Why XML for Messaging?

From: Paul Downey <paul.downey@----------.--->
To: Vladimir Gapeyev <vgapeyev@----.-----.--->
Date: 6/1/2005 10:23:00 PM
On 1 Jun 2005, at 18:59, Vladimir Gapeyev wrote:
>
> There is comfort in receiving only data, without anything executable 
> ---
> for security reasons, if not anything else (data can be inspected for
> absence of harm, code has to be trusted; even sandboxing does not help 
> if
> the code is expected to produce side effects that are not easy to roll
> back).  However, people in universities do work on solving the security
> side of the problem --- "proof-carrying code" (PCC) is one relevant
> keyword.

iirc, Google Suggest is interesting in that it returns a string of 
Javascript which is then executed. i guess the Google page trusts the 
Google service, we all trust Google (they're famously not evil) and it 
all works inside a sandbox (a browser) so is fairly safe.


Paul

--
http://blog.whatfettle.com


transparent
Print
Mail
Like It
Disclaimer
.

These Archives are provided for informational purposes only and have been generated directly from the Altova mailing list archive system and are comprised of the lists set forth on www.altova.com/list/index.html. Therefore, Altova does not warrant or guarantee the accuracy, reliability, completeness, usefulness, non-infringement of intellectual property rights, or quality of any content on the Altova Mailing List Archive(s), regardless of who originates that content. You expressly understand and agree that you bear all risks associated with using or relying on that content. Altova will not be liable or responsible in any way for any content posted including, but not limited to, any errors or omissions in content, or for any losses or damage of any kind incurred as a result of the use of or reliance on any content. This disclaimer and limitation on liability is in addition to the disclaimers and limitations contained in the Website Terms of Use and elsewhere on the site.

.
.

transparent

transparent