On Fri, 13 May 2005, Eric Merritt wrote:
Trusting data (much less code) to the client is just not safe. Theoretically you could encrypt the data and trust the returned data, but there are any number of places where that particular path could (and will if the target is attractive enough) will fail.
Could you give an example of a situation where you can't ensure the integrity of data you have encrypted yourself? Or rather, where do you see the places where "that path" will fail? I might be missing something obvious.
Guillaume