This account is a replica from Hacker News. Its author can't see your replies. If you find this service useful, please consider supporting us via our Patreon.
| Official | https:// |
| Support this service | https://www.patreon.com/birddotmakeup |
| Official | https:// |
| Support this service | https://www.patreon.com/birddotmakeup |
Just to try and understand the decision, an analogy that’s coming to mind would be like saying a van manufacturer wouldn’t have liability if it’s used in a bank robbery. However if the manufacturer sold it with the intent for the buyer to use it for bank robbery (the manufacturer having the intent in this case, as well as the robber themselves), then they could become partially liable.
Have I got that right?
While you’re correct, corporate security teams demand suppliers “comply with OWASP,” despite this being a nonsensical statement to anyone who’d read the website.
Unfortunately, the customer purchasing your product doesn’t know this and (naturally) trusts their own internal experts over you. Especially given all their other suppliers are more than happy to state they’re certified!