[
Lists Home |
Date Index |
Thread Index
]
5/30/2002 4:28:05 PM, "Seairth Jacobs" <seairth@seairth.com> wrote:
>Okay, maybe I am slow to see what's wrong here, but I don't see what's wrong
>here. I have questions about the security solution presented, but isn't the
>problem itself legitimate? If it isn't, would someone be kind enough to
>educate me why a self-describing data file is not an easier target for data
>theft?
Well ... the headline is pretty misleading, and the self-serving quotes from a single vendor
indicate a bit of laziness on the part of the author. More substantively,
the gist of it seems to be that XML makes "security through obscurity" harder to
achieve. I am no security expert, but I thought that "security through obscurity" was a
total loser in the first place. At worst, XML merely slaps people in the face and
says "Deal with it, don't pretend that no one can figure out your unencrypted
messages."
|
