The "trust" part comes from you, the user. How do you know that I (the server operator in this case) am _only_ pushing you a Plucker database? I could make a very small change to the code, which you wouldn't even see flicker by as you sync the data, that grabs your Palm UserName and UserID from your Palm itself. I could even grab your AddressBook, and fake a message on your (local) Palm screen that says "Syncronizing Plucker" if I wanted to.
That's the trust bit.
Good, that is what I thought. I couldn't see anything going from client to server, but wanted to make sure.
_______________________________________________ plucker-dev mailing list [EMAIL PROTECTED] http://lists.rubberchicken.org/mailman/listinfo/plucker-dev
