Can someone list with references / evidences if possible, why we don't see much AJAX in secure web applications like internet banking?
For instance - Internet banking has a list of tabs for Accounts, Payments, Tools, Reports. Normally you'd see these implemented as links to different pages. Why couldn't you just have one page and use AJAX to load the content of the different tabs? (eg. a JSF RichFaces tab control)
I'm assuming that bookmarking and handling the back button (or disabling it as is common for internet banking) for the different URLS will be handled in either scenario. So I'd like to hear other things, like how it could affect security, performance etc?
My team is about to start building a web based payment management system (think setting up payments, managing client account balances, reconciliation etc.). Its not going to be making the actual payments, but it will at some point integrate with a leading bank's internet banking system.
We're divided over using one page and using AJAX for everything else
or
using AJAX only where its really helping user experience.
Ajax can improve usability but adds complexity.
Banks need security.
Complexity is the enemy of security.
Therefore Ajax is the enemy of Banks ;)