[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

RE: SOAP-RPC and REST and security

• To: "'Gavin Thomas Nicol'" <gtn@r...>, xml-dev@l...
• Subject: RE: SOAP-RPC and REST and security
• From: Michael Brennan <Michael_Brennan@A...>
• Date: Wed, 20 Feb 2002 13:38:00 -0800

> From: Gavin Thomas Nicol [mailto:gtn@r...]

<snip/>

> Visibility/discovery. Knowing about something is a priviledge. Not 
> even providing a means for discovery is better protection 
> than fending 
> off people trying to break down the door.

Security through obscurity is the worst kind of security there is. Given
enough time, someone will always figure out what you are trying to hide.
There are plenty of well-known case studies of security breaches proving
that. Just look through the back issues of Bruce Schneier's newsletter [1]
and you can find plenty of those; it's one of his favorite subjects.

It is much better to ensure you have a strong door with a secure lock than
to rely upon people not noticing its there.

[1] http://www.counterpane.com/crypto-gram.html

• Follow-Ups:
  • Re: SOAP-RPC and REST and security
    • From: Gavin Thomas Nicol <gtn@r...>

• Prev by Date: RE: SOAP-RPC and REST and security
• Next by Date: Re: Re: [namespaceDocument-8] 14 Theses
• Previous by thread: Re: SOAP-RPC and REST and security
• Next by thread: Re: SOAP-RPC and REST and security
• Index(es):
  • Date
  • Thread