tailieunhanh - O’Reilly Securing Ajax Applications phần 10

một quyết định có ý thức chỉ xảy ra để làm việc theo cách đó. Triển khai của họ hoặc không yêu cầu bất cứ điều gì người dùng của họ hoặc không làm thay đổi cơ bản dữ liệu, họ là những gì họ đang có. Đối với những người khác, có một số vấn đề nghiêm trọng mà có thể mất một lúc để an toàn. | a conscious decision it just happened to work out that way. Their implementations either don t ask anything of their users or don t alter any of the underlying data they are what they are. As for the others there are some serious issues that could take a while to secure. Generally the bar for web security needs to be raised. However this is a daunting challenge. It is difficult for me to sit here and recommend stronger security measures such as SSL when even companies that sell certificates such as Verisign http don t require SSL on their home pages talk about a missed marketing opportunity. In this chapter I have shown some of the major security obstacles facing new web applications and mashups. For these applications to succeed they must have our trust. Trust is not something users should readily give away. Trust should be earned. By extending trust through digital certificates and making other security assurances to users these web sites can gain trust. The onus is on them. With the extreme popularity among developers that these mashups hold it is clear that they are here to stay at least for a while. As you consider developing these types of sites I implore you to think about security and the privacy of your users and data. Take some responsibility. As I said before be a trendsetter. Break out of the Beta mold and set up a secure mashup. Use security as your distinction. Be the first and claim your bragging rights For More Information Department of Homeland Security. US-CERT United States Computer Emergency Readiness Team. Cyber Security Tip ST04-013 Protecting Your Privacy. http cas tips . Garza Victor. Online Crime As Ugly As Ever. . http originalContent 0 289142 sid4_gci1213573 . I ll never get caught Samy. http popular . Programmable Web. Home. http . Case Studies 211 Download at Download at Index Numbers .