[cap-talk] Webkeys vs. the web

Karp, Alan H alan.karp at hp.com
Wed Apr 1 14:01:14 EDT 2009


Raoul Duke wrote:
> 
> how far does the concern of users getting their hands on the web keys
> go? like, can't i just do some form of "view source" and get them?

I'm not concerned that they'll get their hands on them.  I just don't want users to think of webkeys the way they think of URLs.  Let me know if you have another way to achieve that goal.

In SCoopFS, the webkeys are held in variables of the ActionScript program.  View source just shows the filename of that script.  I guess you could always run under a debugger, but I don't expect that to be common.

________________________
Alan Karp
Principal Scientist
Virus Safe Computing Initiative
Hewlett-Packard Laboratories
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
http://www.hpl.hp.com/personal/Alan_Karp





More information about the cap-talk mailing list