[cap-talk] Fwd: [cors] TAG request concerning CORS &Next Step(s)

[Raoul Duke]

>> > Security is often a pain.
> Read <http://www.snopes.com/college/exam/barometer.asp>.
> Security is hard for the same reason the barometer joke is funny.

nice!

the things are all related, but not all the same. i wonder how the
original was meant?

- "security is often a pain" to deal with as a user.
- "security is often a pain" to get right as an implementer of a system.
- "security is hard" isn't necc. the same as "a pain".

i guess in my mind i was envisioning some model that would include
forces among goals and such, which would somehow help envision what
the trade-offs and potential holes are. i don't know how to go about
drawing up such a thing.

sincerely.