2009/dap/policy-reqs Overview.html,1.26,1.27

Update of /sources/public/2009/dap/policy-reqs
In directory hutz:/tmp/cvs-serv23392

Modified Files:
	Overview.html 
Log Message:
additional fixes

Index: Overview.html
===================================================================
RCS file: /sources/public/2009/dap/policy-reqs/Overview.html,v
retrieving revision 1.26
retrieving revision 1.27
diff -u -d -r1.26 -r1.27
--- Overview.html	15 Mar 2010 22:40:41 -0000	1.26
+++ Overview.html	15 Mar 2010 22:43:05 -0000	1.27
@@ -369,7 +369,7 @@
       <h2>User Control Principle</h2>
         <p>
           Prompts should be eliminated whenever possible. Many prompts do not provide
-          any meaningful security because:
+          any meaningful security because:</p>
           <ul>
             <li>they don't provide the user with the information needed to make an
               informed security decision;</li>
@@ -377,6 +377,7 @@
               just because that's what's needed for the application to
               continue.</li>
           </ul>
+      <p>
           If prompts are shown and dismissed as a matter of routine, then the user is
           less inclined to take any security decision seriously, which further
           undermines the effectiveness of a user-driven access control system.

Received on Monday, 15 March 2010 22:43:09 UTC