Re:Web Developer Security Checklist
by aeronautic on Tuesday May 16, 2017 @01:36AM
(#14347589)
I take your point that this could be explained a lot better. In the next revision when I fold in the feedback, I'll make this clearer. One suggestion, that I'll do is pair each checklist item with an implementation note that explains it better. Thanks for pointing out the flaws.
[ Parent
| on HN ]
Ah, I didn't realise you were the author!
Sorry for coming on a little strong. I should wait a few minutes before tearing into things...
The article is a great beginning, and as we have seen, definitely a conversation-starter! So thanks for creating it.
What I'm scared of, though, is non-technical people finding articles like this and, without a thorough understanding of the tradeoffs involved, presenting it as a list of requirements for their team. That's probably not what you intended - but I've seen this kind of thing happen again and again.
Re:Web Developer Security Checklist
by aeronautic on Tuesday May 16, 2017 @01:42AM
(#14347618)
No problem, all feedback is good.
Lucky I've got my asbestos pants on ;-)