Why client-side verification is bad

Re:Why client-side verification is bad by Joakal on Wednesday July 06, 2011 @04:23AM (#2732994)

Client side validation is good for speed, however should not be trusted when sent to server. Server side validation is for validating such information to prevent issues. eg SQL injections.

[ Parent | on HN ]

Re:Why client-side verification is bad by deno on Wednesday July 06, 2011 @04:59AM (#2733067)

But you can't trust client-side validation, unless you run the client in a DRM container (client then can just sign the request and you can assume that it executed in a secure memory, unaltered).

[ Parent | on HN ]

Re:Why client-side verification is bad by masklinn on Wednesday July 06, 2011 @05:33AM (#2733121)

Is that not exactly what he wrote?

[ Parent | on HN ]

Re:Why client-side verification is bad by deno on Wednesday July 06, 2011 @06:44AM (#2733288)

It seems I got it mixed up with a different comment. My apologies.

[ Parent | on HN ]