Altova Mailing List Archives>Archive Index >xml-dev Archive Home >Recent entries >Thread Prev - Re: [xml-dev] Here's why it's not always a good idea to embed >Thread Next - Re: [xml-dev] Here's why it's not always a good idea to embed validationinformation (e.g., schemaLocation) in instance documents Re: [xml-dev] Here's why it's not always a good idea to embed validationinformation (e.g., schemaLocation) in instance documentsTo: John Snelson <john.snelson@------.---> Date: 1/6/2009 10:09:00 PM > Your presentation looks good, but I'm not sure it goes far enough. Was
> there ever a good reason to embed validation information in an instance
> document? Isn't that fundamentally backwards, like trusting a thief
> because /he says/ he's not a thief?
Sometimes you might have reason to trust the sender. Or the implications
of getting it wrong if you do trust him may not matter. Or the cost of
doing out of band configuration may exceed the costs of getting the trust
wrong. For example, if you are building generic XML stuff (like, say an
appliance :).
We support schemaLocation. But we also have a configuration operation
that passes the URL's through a set of rewrite rules so that, e.g., you
can rewrite remote schema to a local version that you trust.
/r$
--
Visiting Member, IBM Academy
STSM, DataPower Chief Programmer
WebSphere DataPower SOA Appliances
http://www.ibm.com/software/integration/datapower/ | ||||||
| Company | Legal | Press | Partners | Careers | Sitemap | Contact Us | Altova Blog | Mobile | Full Site | |||
|
