Secured-by-Design Empty Client AJAX

Conventional AJAX requires the browser to connect directly to a web service or even a raw data provider. Client side AJAX, therefore, exposes credentials, tokens and other sensitive data which presents a key concern for enterprise applications.

On the other hand, there is the ‘empty client’ concept. According to this approach the client never consumes data or services directly, since all of the application logic, UI logic and data access is handled on the server.

The client simply connects to the “view” on the server, via a standard protected HTTP/HTTPS pipeline, and the "view" is projected on the browser by Meta Data and therefore never compromises security.

Since there is no data, no logic and no open services on the client, the 'empty client' approach presents a highly secured alternative to conventional client side AJAX and introduces a new level of security to web applications in general.

Gizmox is the company behind Visual WebGui which brings AJAX & Silverlight to enterprises with unprecedented ROI for creating & deploying enterprise level 'web like desktop' applications on the web.