On 5/13/05, Bruce Butterfield bab@entricom.com wrote:
Eric Merritt wrote:
Well, there's data and then there's data. What if the continuation could not be unserialized into anything useful for attacking the server - sandboxes are useful for this.
If you could do this it would seriously lessen your exposure to risk.
I'm not trying to minimize the security issue here but there are some real advantages moving closer to a peer-to-peer model vs. dumb client/smart server.
There are advantages and disadvantages to almost everything, its just a matter of weighting the advantages against the disadvantages on a case by case basis. I believe that in the vast majority of cases the disadvantages of this approach outweigh the advantages. However, that doesn't mean it will be true in every case.