Talk:OWASP ZAP

Page contents not supported in other languages.
From Wikipedia, the free encyclopedia

This Article was amended[edit]

This Article was amended. please delete the template. Thanks — Preceding unsigned comment added by Fabiorahamim (talkcontribs) 09:14, 24 May 2017 (UTC)[reply]

Missing Reference from Linux Foundation or OpenSSF about SSP[edit]

The article currently contains an inline link to the Software Security Project (SSP) website. This seems appropriate, because it is a new (technically unlaunched) project, but it means that someone who wants to look at relevant references to SSP . I think it would be useful to have a reference from either the Linux Foundation or OpenSSF about SSP itself has nowhere else to turn.

The fact that there is a reference from the relatively old and reputable OWASP website claiming ZAProxy as one of its projects and links to the official ZAProxy site (increasing confidence that this is, in fact, the project's official site) is helpful.[note 1] However, it is useful to verify from multiple directions so that a person can trust the project to the maximum extent that they trust any one of the organizations, rather than having to take the project's claims about itself at face value (or relying on a different organization which the possibly trust to a lesser degree or in a different way). Unfortunately, "Software Security Project" is literally the most vague name they could have chosen, resulting in a large number of false positives when searching either the Linux Foundation or OpenSSF websites. skyvine 🏳️‍⚧️ (talk) 16:49, 14 September 2023 (UTC)[reply]

Notes[edit]

  1. ^ The referenced "OWASP website" is a wiki, but it requires an application process so it would be difficult for someone to insert inaccurate information maliciously.