Re: [Owasp-input-api-developers] My thoughts on requirements

[Alex R. <al...@se...>]

Gabriel Lawrence wrote:
> Uhhh, am I too demanding to say how 'bout both? Darn, now I really sound
> like a marketing guy ;-)

I think that shooting for both is a poor idea for a first release 
because it will allow simply too many degrees of freedom, which we 
previously identified as a significant source of security failure. 
Building security software (espically when you are on the defense) is 
necessarialy _very_ different from building "regular" applications, and 
we need to modify our goals and evaluation criteria accordingly.

-- 
Alex Russell
al...@Se...
al...@ne...