river-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Michał Kłeczek <mic...@kleczek.org>
Subject Re: deserialization remote invocation strategy
Date Wed, 15 Feb 2017 10:04:39 GMT

> The code actually does what I've described above, but don't take my word for it, check
it for youself. :)
>
> If you disagree, don't use it.
It works the other way around - before I decide to use it - I have to 
understand how it works.
Even more so if we are talking about security.

That is why I consider scrutiny and questioning a Good Thing in this 
context.

"Check for yourself" is not an encouraging advice in the area of security :)

Cheers,
Michal


Mime
View raw message