- From: Frederick Hirsch via cvs-syncmail <cvsmail@w3.org>
- Date: Mon, 15 Mar 2010 22:43:07 +0000
- To: public-dap-commits@w3.org
Update of /sources/public/2009/dap/policy-reqs In directory hutz:/tmp/cvs-serv23392 Modified Files: Overview.html Log Message: additional fixes Index: Overview.html =================================================================== RCS file: /sources/public/2009/dap/policy-reqs/Overview.html,v retrieving revision 1.26 retrieving revision 1.27 diff -u -d -r1.26 -r1.27 --- Overview.html 15 Mar 2010 22:40:41 -0000 1.26 +++ Overview.html 15 Mar 2010 22:43:05 -0000 1.27 @@ -369,7 +369,7 @@ <h2>User Control Principle</h2> <p> Prompts should be eliminated whenever possible. Many prompts do not provide - any meaningful security because: + any meaningful security because:</p> <ul> <li>they don't provide the user with the information needed to make an informed security decision;</li> @@ -377,6 +377,7 @@ just because that's what's needed for the application to continue.</li> </ul> + <p> If prompts are shown and dismissed as a matter of routine, then the user is less inclined to take any security decision seriously, which further undermines the effectiveness of a user-driven access control system.
Received on Monday, 15 March 2010 22:43:09 UTC