Proof-carrying code and type preserving compilation allow securing even fairly complex compiler optimizations to be done securely. Sprinkle process separation/isolation and lowered rights onto that and I don’t think fast JS has to be a significant security risk.
Thanks, Andreas > On Nov 11, 2014, at 3:07 PM, Robert O'Callahan <rob...@ocallahan.org> wrote: > > On Wed, Nov 12, 2014 at 11:42 AM, Cameron Zwarich <zwar...@mozilla.com> > wrote: > >> On Nov 11, 2014, at 1:21 PM, Robert O'Callahan <rob...@ocallahan.org> >> wrote: >>> https://github.com/servo/servo/wiki/Workweek-alt-js >>> >>> I'm pleased with the "Table discussion until mid 2015" outcome :-). >>> >>> It might make sense at some point to have a "super secure Servo" build >>> where you plug in a JS interpreter and simple GC written in Rust, but I >>> can't see a viable general-purpose browser without a complex multitier >> JIT. >> >> Which use cases do you believe require a complex multitier JIT? >> > > Games, visualizations, emulators, signal processing, document processing > (pdf.js), for starters. > > Rob > -- > oIo otoeololo oyooouo otohoaoto oaonoyooonoeo owohooo oioso oaonogoroyo > owoiotoho oao oboroootohoeoro oooro osoiosotoeoro owoiololo oboeo > osouobojoeocoto otooo ojouodogomoeonoto.o oAogoaoiono,o oaonoyooonoeo > owohooo > osoaoyoso otooo oao oboroootohoeoro oooro osoiosotoeoro,o o‘oRoaocoao,o’o > oioso > oaonosowoeoroaoboloeo otooo otohoeo ocooouoroto.o oAonodo oaonoyooonoeo > owohooo > osoaoyoso,o o‘oYooouo ofooooolo!o’o owoiololo oboeo oiono odoaonogoeoro > ooofo > otohoeo ofoioroeo ooofo ohoeololo. > _______________________________________________ > dev-servo mailing list > dev-servo@lists.mozilla.org > https://lists.mozilla.org/listinfo/dev-servo _______________________________________________ dev-servo mailing list dev-servo@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-servo
