A CDS can be used to mediate information flows between two security domains, where such mediation needs to be more tightly controlled than what a firewall can offer.
This is typically between the Internet and a government network, or between two government networks of different security classifications.
Furthermore, an "access" CDS provides "access" to something in other security domains, but does not allow "transfer of user data" between the domains.
Does this effectively mean:
only HTTP is allowed as a protocol;
that no scripts can flow to the client side, and no forms can be filled;
that access to a higher security domain is not allowed from a lower security domain?
