OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index]
RE: [xml-dev] Features of XML Languages that Increase Complexity?

Hey Simon,

    Roger, are you working for the permanently paranoid?  
    Is the only communication to be allow safe communications?

Well, yes, of course. Safe communications _and_ safe applications. 

    Treat all systems as compromised ... There is no such thing
    as 'secure' any more. [1]

I reckon there's not much point in creating an awesome XML language if its complexity exposes input-processing applications to widespread vulnerabilities.

More to the point: 

    Science to engineers: some problems are not solvable, do not
    set yourself up to solve them. [2]


[1] Deborah Plunkett, NSA Information Assurance Directorate

[2] http://www.cs.dartmouth.edu/~sergey/langsec/insecurity-theory-28c3.pdf

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index]

News | XML in Industry | Calendar | XML Registry
Marketplace | Resources | MyXML.org | Sponsors | Privacy Statement

Copyright 1993-2007 XML.org. This site is hosted by OASIS