From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: weis
Received: (from weis@localhost) by pauillac.inria.fr (8.6.10/8.6.6) id QAA23731 for caml-redistribution; Tue, 14 Nov 1995 16:08:18 +0100
Received: from concorde.inria.fr (concorde.inria.fr [192.93.2.39]) by pauillac.inria.fr (8.6.10/8.6.6) with ESMTP id PAA23440 for <caml-list@pauillac.inria.fr>; Tue, 14 Nov 1995 15:49:38 +0100
Received: from margaux.inria.fr (margaux.inria.fr [128.93.8.2]) by concorde.inria.fr (8.7.1/8.6.9) with ESMTP id PAA26316 for <caml-list@pauillac.inria.fr>; Tue, 14 Nov 1995 15:49:38 +0100 (MET)
Received: from concorde.inria.fr (concorde.inria.fr [192.93.2.39]) by margaux.inria.fr (8.6.10/8.6.6) with ESMTP id PAA03527 for <caml-list@margaux.inria.fr>; Tue, 14 Nov 1995 15:49:37 +0100
Received: from fronsac.inria.fr (fronsac.inria.fr [128.93.8.72]) by concorde.inria.fr (8.7.1/8.6.9) with ESMTP id PAA26312; Tue, 14 Nov 1995 15:49:37 +0100 (MET)
Received: from localhost (rouaix@localhost) by fronsac.inria.fr (8.6.10/8.6.6) with SMTP id PAA02853; Tue, 14 Nov 1995 15:49:42 +0100
Message-Id: <199511141449.PAA02853@fronsac.inria.fr>
X-Authentication-Warning: fronsac.inria.fr: Host localhost didn't use HELO protocol
X-Mailer: exmh version 1.6.4 10/10/95
To: Christophe Raffalli <raffalli@cs.chalmers.se>
cc: caml-list@margaux.inria.fr
Subject: Re: MMM, a Web browser with applets in Caml Special Light 
In-reply-to: Your message of "Tue, 14 Nov 1995 15:28:16 +0100."
             <199511141428.PAA29690@lips.cs.chalmers.se> 
Reply-To: Francois.Rouaix@inria.fr
X-uri: http://pauillac.inria.fr/~rouaix/
X-Face: (0Y_n(V51BL8=yDki='|>_Gh+\:mC&`q1xHDEP?Pj'5{"Mqg(`"P3@"sREkk`E<S"l[z~vC!gEh}y;96~"$0O[GEP7rh\]F^b?M$}-Rq-Tt'SM+omf%$;v"hnG68NV<IyyJf3U}A!a%s_@v6Zj;x8#W2C0D(D)^RoJ^^UaDc(N%DTX/;#1Lg3CJ2hQH%*z7j
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Date: Tue, 14 Nov 1995 15:49:40 +0100
From: Francois Rouaix <Francois.Rouaix@inria.fr>
Sender: weis


> Have you think about security ? Basically an applets should
> not be able to write or delete any files, so not all the caml-light library
> should be accessible.

Yes, naturally. Security is *the* important issue with applets !
Basically (to make a long story short), security relies on the type and 
module system.
Basic facts about Caml applets security are discussed in
<URL:http://pauillac.inria.fr/~rouaix/mmm/applets.html>
Check also the paper submitted to publication
<URL:http://pauillac.inria.fr/~rouaix/mmm/papers/mmm-ps.gz>

I'm currently writing the reference documentation for applets, so keep an eye
on the MMM home page.

Finally, please note that I'm not making any claim about security yet.
Although I've been working on identifying and blocking security holes for
several weeks, I may have forgotten something.
I NEED FEEDBACK ON THIS TOPIC. If you are interested in Caml applets, please
contact me. It might be worth setting a up a separate mailing list.

--
Francois.Rouaix@inria.fr                   Projet Cristal - INRIA Rocquencourt
WWW Home Page: http://pauillac.inria.fr/~rouaix/