RE: Question about security and the Xforms

Hi Justin,

For local load/save, that's always possible even without supporting text in
the XForms specification. In fact modern browsers all support saving all or
part of a form, and I expect that to continue with XForms.

In fact, it will be even better, because instead of heuristics to match form
data to form controls, there is a 'p3ptype' property to specifically
describe what kind of data is getting collected.

Signed forms is a hot topic, though we are not tackling it for XForms 1.0.

Thanks,

.micah

-----Original Message-----
From: Justin MacCarthy [mailto:macarthy@iol.ie]
Sent: Tuesday, September 03, 2002 8:46 AM
To: xforms
Subject: Question about security and the Xforms 




Hi, I don't see anything about security  (outside section 11.2) etc. in
XForms.

Should it be possible to load/save instance data to the clients local drive?
What about using a URI/URL that points to a local resource?
Should you be able to "sign" a form similar to sign a JS in mozilla?

Is / should this be outside of the XForms spec?

Thanks

Justin