OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help



   RE: [xml-dev] SOAP-RPC and REST and security

[ Lists Home | Date Index | Thread Index ]

> From: Gavin Thomas Nicol [mailto:gtn@rbii.com]


> Visibility/discovery. Knowing about something is a priviledge. Not 
> even providing a means for discovery is better protection 
> than fending 
> off people trying to break down the door.

Security through obscurity is the worst kind of security there is. Given
enough time, someone will always figure out what you are trying to hide.
There are plenty of well-known case studies of security breaches proving
that. Just look through the back issues of Bruce Schneier's newsletter [1]
and you can find plenty of those; it's one of his favorite subjects.

It is much better to ensure you have a strong door with a secure lock than
to rely upon people not noticing its there.

[1] http://www.counterpane.com/crypto-gram.html


News | XML in Industry | Calendar | XML Registry
Marketplace | Resources | MyXML.org | Sponsors | Privacy Statement

Copyright 2001 XML.org. This site is hosted by OASIS