Posted by MP on 04/11/06 10:10

Jukka K. Korpela wrote:
> Steven Saunderson <Phelum@Syd.au> wrote:
>
>> On Tue, 11 Apr 2006 05:52:35 GMT, MP <mpuputti@NOSPAMyahoo.co.uk> wrote:
>>
>>> So I seem to be missing the answer on : "How to activate the new
>>> .htaccess settings?".
>>> And if the answer is "Simply upload the file, that's all!", then either
>>> (i) my ISP doesn't allow me to use .htaccess, or (ii) some attributes of
>>> the file are still wrong. Right?
>> Can you ask your ISP ?
>
> Given the abbreviated address www.elisanet.fi/matti.puputti/ , I'm afraid the
> answer will be (i). This particular service provider (Elisa a.k.a. Kolumbus)
> does not let its customers affect server behavior with .htaccess, i.e. the
> server has been set to ignore .htaccess. This applies to the normal web space
> that private people have as customers. There are more expensive alternatives,
> sold basically as business web space. It's price differentiation of a kind.
> In other words, they intentionally reduce the functionality, and you have to
> pay considerably more to get what many people regard as normal service.
>
> (I once asked them about this. The answer was obscure and mentioned "security
> issues", of course.)
>
>> The file (AddType application/octet-stream .kmz
>> .gdb)is definitely there.
>
> Yes, and it is world-readable, as it should be. When the server has been set
> to use customer .htaccess files, nothing more needs to be done than to upload
> a correct .htaccess file and check the protections (read access to all).
>

Thanks! I think this is now both well explained and understood.
I will send an email to Elisa, but same as Yucca seem to think, I am not
too optimistic on getting positive reactions.


I myself work on standardisation of broadcast security solutions, and
have learned at least that security can not be achieved by obscurity
(yes, some of the world's main broadcast security vendors still seem to
build their philosophy on "security by obscurity").
I know Yucca didn't mean this, but couldn't resist on adding the comment
since the words were in his mail...


MP

[Back to original message]