Re: ACTION-278 Hiding metadata for security reasons

On Sun, 2010-02-07 at 14:50 -0800, ashok malhotra wrote:
> Hi Larry:
> This is useful.
> Non-public URIs provide a weak level of security that is held to be 
> adequate for some usecases.
> I wonder if there is disagreement with the above statement.

I disagree.

The unguessable URI pattern can be made about as secure as you like;
in particular, as secure or more secure than passwords+cookies.


-- 
Dan Connolly, W3C http://www.w3.org/People/Connolly/
gpg D3C2 887B 0F92 6005 C541  0875 0F91 96DE 6E52 C29E