RE: HTTP Server's jobs for CGI applications

Hey, I like IE 5.x! :)  NS I can't stand.  :)

Brad (double smiley's... holy...)

> -----Original Message-----
> From: Leslie Russell [mailto:leslier@datrek.com]
> Sent: Monday, July 17, 2000 1:11 PM
> To: MIDRANGE-L@midrange.com
> Subject: RE: HTTP Server's jobs for CGI applications
> 
> 
> So, you mean to say that you don't go to any site that uses 
> java script 
> and cookies like oh lets say, www.ibm.com? 
> What exactly do you do for information, if you restrict you 
> use of the 
> internet to only those sites that make use of validated HTML. 
> If java script blows up your browser; a) contact the site development 
> team and tell them cause they want to know, b)upgrade your 
> browser but 
> not to IE 5.x or NS 6.x, or c)don't go back to that site.
> Yes, it is purely sloppy programming if java script blows up 
> your browser 
> or if tables are not displayed correctly or if colors are not 
> dithered 
> correctly. These problems are known to exist and there are 
> work arounds. 
> For instance if you don't want people snagging your cookies 
> there is a 
> little utility that you can get to stop that. 
> 
> http://filedudes.ionsys.com/win95/cookies/files/setpacb2.exe
> 
> 
> >>>>>>>>>>>>>>>>>> Original Message <<<<<<<<<<<<<<<<<<
> 
> On 7/17/00, 12:12:11 PM, boldt@ca.ibm.com wrote regarding RE: HTTP 
> Server's jobs for CGI applications:
> 
> 
> > Leslie wrote:
> > >I don't get your point Hans, what you are talking about is
> > >sloppy programming not security holes.
> 
> > OK, there are two separate issues in this current thread:
> > 1) cookies and associated privacy issues; 2) JavaScript
> > and associated security threats (which I didn't go into
> > detail into)
> 
> > In either case, we're not talking about "sloppy programming".
> > We're talking about specific intent either to collect
> > personal information or to compromise client system security.
> 
> > Yes, you can certainly code JavaScript to detect specific
> > browsers, but that can be overridden by disabling JavaScript.
> 
> > You could also detect on the server side which browser is
> > requesting the resource. But then the HTTP variables involved
> > can be faked or suppressed, so that's not a reliable
> > technique either.
> 
> > My point is that it is only proper HTML coding style to not
> > have any dependencies on JavaScript for people to use your
> > web site.
> 
> > Cheers!  Hans
> 
> > Hans Boldt, ILE RPG Development, IBM Toronto Lab, boldt@ca.ibm.com
> 
> 
> > +---
> > | This is the Midrange System Mailing List!
> > | To submit a new message, send your mail to 
> MIDRANGE-L@midrange.com.
> > | To subscribe to this list send email to 
> MIDRANGE-L-SUB@midrange.com.
> > | To unsubscribe from this list send email to 
> MIDRANGE-L-UNSUB@midrange.com.
> > | Questions should be directed to the list owner/operator: 
> david@midrange.com
> > +---
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to 
> MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: 
> david@midrange.com
> +---
> 
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---