> From: Haykel BEN JEMIA [mailto:hayke...@gmail.com] 
> Sent: 20 February 2012 16:00
> Talking about security, I think there is nothing being done to 
> prevent man-in-the-middle for JS libraries hosted by Google 
> for example, so it does not seem to be an issue even if JS is plain 
> text and easier to manipulate (I did not hear about such an attack).
>  Is the RSL issue we are talking about a real issue?

I think it's more  a case that the JavaScript community seem more /relaxed/ 
about security. Such attacks are theoretically possible at least. If you are 
writing an application for a bank for example that handles financial 
transactions, then I'd imagine even theoretical threats have to be taken 
seriously.

David.

Reply via email to