4 ms·
This list could just as well be called "List of security stuff I learned about when making my product". Some of the stuff is just Draconian, certainly not appli
by strictfp 9y ago
This list could just as well be called "List of security stuff I learned about when making my product". Some of the stuff is just Draconian, certainly not applicable for any arbitrary web developer.
- viraptor 9y agoThere are rarely any checklists applicable everywhere in the same way. Why not treat it as: list of ideas to evaluate and prioritise/ignore into your own checklist for future/current project? It's not like it's all invalid because it's not fully applicable.
- strictfp 9y agoNo, I think it's valuable as a work log and bucket of ideas on how to improve security. It's just how it's framed that irks me.