[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

Re: Re: Where does the "nothing left but toolkits" mythcome fr

• To: Elliotte Harold <elharo@m...>
• Subject: Re: Re: Where does the "nothing left but toolkits" mythcome from?
• From: Rich Salz <rsalz@d...>
• Date: Wed, 09 Feb 2005 09:57:14 -0500
• Cc: XML Developers List <xml-dev@l...>
• In-reply-to: <420A0217.2070808@m...>
• References: <Pine.LNX.4.44L0.0502080817300.12704-100000@s...> <4208E648.5020705@m...> <4208E9A1.6030108@d...> <420A0217.2070808@m...>
• User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7b) Gecko/20040421

> You place considerably more faith in the W3C process than I do.

Perhaps.  I think the spotlight on this particular aspect of this 
particular effort will prevent anything bad from happening.  I am 
certainly expect to often be surprised when some WG goes off on their 
own. :)  Even widespread knowledge isn't enough to avoid breakage -- who 
  knew xml:id break c14n, for example?

> 2. XML 1.1 

 From what I can see, there seems to be emerging consensus that this 
will be acknowledged as a mistake, if market down-take doesn't leave it 
stillborn.  I don't expect perfection; admitting mistakes is good.

> 3. SOAP, specifically the restrictions on the document type declaration 
> and processing instructions

I can't speak to PI's, although they have obvious security implications.
Since DTD's can't describe a subset of a document, aren't namespace 
aware, and also have security issues ("hey, server, go fetch this 
external entity....  just trust me, it's safe"), they shouldn't appear 
in SOAP messages.

	/r$

-- 
Rich Salz, Chief Security Architect
DataPower Technology                           http://www.datapower.com
XS40 XML Security Gateway   http://www.datapower.com/products/xs40.html
XML Security Overview  http://www.datapower.com/xmldev/xmlsecurity.html

• References:
  • Re: Re: Where does the "nothing left but toolkits" mythcome from?
    • From: Rich Salz <rsalz@d...>
  • Re: Re: Where does the "nothing left but toolkits" mythcome from?
    • From: Elliotte Harold <elharo@m...>
  • Re: Re: Where does the "nothing left but toolkits" mythcome from?
    • From: Rich Salz <rsalz@d...>
  • Re: Re: Where does the "nothing left but toolkits" mythcome from?
    • From: Elliotte Harold <elharo@m...>

• Prev by Date: Re: baffling encoding problem
• Next by Date: Re: Re: Where does the "nothing left but toolkits" myth come from?
• Previous by thread: Re: Re: Where does the "nothing left but toolkits" mythcome from?
• Next by thread: Re: Re: Where does the "nothing left but toolkits" mythcome from?
• Index(es):
  • Date
  • Thread