> "The conclusion here, broadly, is that white-box is better than black-box for this application." Well I think this is incorrect. Generally speaking, a black-

> "The conclusion here, broadly, is that white-box is better than black-box for this application." Well I think this is incorrect. Generally speaking, a black-box exposes an interface that you can use, and a white-box is something you can internally modify. One is not necessarily better than the other. Using a white-box approach can create tight-coupling between components in a system as you could be relying on internal mechanisms, whereas a black-box approach enforces boundaries in your system which is generally good. Also, it's often better to test systems with a black-box mentality to ensure security, resilience etc... It's not inherently representing good/bad, however modern terms like, opaque/transparent might be more accurate and less controversial I suppose.