Posted by Evert - Rooftop Solutions on 04/07/05 16:16

>>>
>>> If anyone is interested, I found this document which appears to provide
>>> more details...
>>>
>>>
>>> http://support.microsoft.com/kb/834489
>>
>>
>>
>> Is it just me, or is this a case of MS breaking a protocol because their
>
>
> no its not you :-).
>
>> stupid interface was hiding information it shouldn't have hidden in the
>> first place?
>>
>> Oh well.
>>
>
Actually, the reason they did is because of fishing. A malicious guy
could construct an url like
http://www.mybank.com/blablaetouheiutgiwuehtg@evildomain.org/

Firefox prompts before it opens an url like this, a much better way to
handle it =)

grt,
Evert

--
Rooftop Solutions - Web Applications on Demand
tel. (+31)628962319 fax. (+31)842242474
evert@rooftopsolutions.nl
http://www.rooftopsolutions.nl

• Next in forum: insert mysql data with safe mode on problem
• Prev in forum: Re: [PHP] switch question
• Thread view: Re: [PHP] secure document : solution wanted

[Reply to this message]