[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Y Store /Closures

At Sun, 16 Mar 2003 16:37:11 -0500, P T Withington wrote:
> On Saturday, Mar 15, 2003, at 13:29 US/Eastern, Robby Findler wrote:
> > The basic idea is to use CPS plus a few other program transformations
> > to enable the web script to marshall the continuation into a hidden
> > field and send it across with the web page. Then, when the answer comes
> > back, you turn the data in the hidden field back into a continuation
> > and throw to it.
> Does anything prevent me from forging a continuation and taking over 
> your web server?

Yes, two things: 1) it's not implemented (beyond a prototype that's not
running anywhere in particular). 2) the continuations are encrypted.
There are a few more details in the paper.