[SC-L] "Bumper sticker" definition of secure software

[mikeiscool]

On 7/21/06, Florian Weimer <fw at deneb.enyo.de> wrote:
> * Brian A. Shea:
>
> > My slogan:
> >
> > Unsecured Applications = Unsecured Business
>
> Which is completely acceptable if you and your business partners are
> aware of the risk level at which your are running your company.
>
> Secure software costs more, requires more user training, and fails in
> hard-to-understand patterns.  If you really need it, you lose.

Really secure software should require _less_ user training, not more.

-- mic