[cap-talk] Security considerations for cookies

[Ka-Ping Yee]

On Wed, 17 Feb 2010, Raoul Duke wrote:
> On Wed, Feb 17, 2010 at 10:52 AM, Tyler Close <tyler.close at gmail.com> wrote:
>> Although the term "Confused Deputy" seems to have caught on somewhat,
>> I find that people (even very smart ones) almost universally don't
>> really understand what it means.

"Confused" doesn't really express the malicious nature of the confusion.
I know "confused deputy" already has a lot of mindshare, but I have at
times wondered if "abused deputy" or "hoodwinked deputy" might get that
across better.


-- ?!ng