[Home] [By Thread] [By Date] [Recent Entries]

  • To: 'Mike Champion' <mc@x...>, xml-dev@l...
  • Subject: RE: The sky is falling! XML's dirty secret! Go back! It's a trap!
  • From: "Bullard, Claude L (Len)" <clbullar@i...>
  • Date: Thu, 30 May 2002 17:05:50 -0500

The question might be, is it possible that markup 
leaves signposts in encrypted data that make them a security 
risk?

Someone who understands encryption would have to answer that. 
The article is not that informative but it is an interesting 
question.

len

From: Mike Champion [mailto:mc@x...]

Well ... the headline is pretty misleading, and the self-serving quotes from a single vendor
indicate a bit of laziness on the part of the author.  More substantively,
the gist of it seems to be that XML makes "security through obscurity" harder to
achieve.  I am no security expert, but I thought that "security through obscurity" was a
total loser in the first place. At worst, XML merely slaps people in the face and 
says "Deal with it, don't pretend that no one can figure out your unencrypted
messages."

Site Map | Privacy Policy | Terms of Use | Trademarks
Free Stylus Studio XML Training:
W3C Member