<11e306600809261738g47207a95n2d025e9fc32bb9e@mail.gmail.com>
Current votes: None.
------=_Part_26002_24300534.1222475883745 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Content-Disposition: inline On Sat, Sep 27, 2008 at 11:55 AM, Elliotte Rusty Harold < elharo@metalab.unc.edu> wrote: > As I said, it's an existence proof. Sun's inability to provide decent > developer tools (unlike Adobe) doesn't reflect on the capability of the > model. > That has nothing to do with it. You're saying Java's security model is adequate for what people want to do on the Web. I say that is unproven since people are not using Java on the Web. *Why* they are not using Java on the Web is irrelevant. In fact, people are doing a lot of things on the Web, using cross-origin IFRAMEs, that are not possible with the Java model. Or maybe you're not saying that. Maybe you're just saying "the Java model is secure" and not claiming it meets people's needs. In that case, you may be right, but that's not very interesting --- it's easy to come up with safe, simple security models that don't provide the functionality people want. Rob