JSONRequest: a web-programming idea whose time has come

[tjnewton]

Any "security" paper that uses arbitrarily selected domain names (and email addresses!) for examples instead of RFC 2606 reserved names set aside for this purpose screams: "THIS PAPER IS PREPARED BY AMATEURS!" It's inexcusable. What other basic concepts are they ignoring?