I'd like to commend Jeff and Phil, and any other members of the netscape team who are here, for the strong list of security controls available in Atlas (beta 2) They include control of caching SSL protected docs, alerts before showing a cookie or submitting a form via email, control over email address as ftp password, and, best of all, Java and JavaScript come turned off by default. Nice work! (I'll also offer a pet peeve, which is I can't refuse to accept server pushes, and the stop button doesn't really seem to affect them. I should be able to prevent keep-alive if I don't want it.) Adam -- "It is seldom that liberty of any kind is lost all at once." -Hume
Adam Shostack wrote:
They include control of caching SSL protected docs, alerts before showing a cookie or submitting a form via email, control over email address as ftp password, and, best of all, Java and JavaScript come turned off by default.
One minor correction. Java and JavaScript are Enabled by default. Note that the sense of the options changed from "Disable Java" to "Enable Java".
Nice work!
Thanks.
(I'll also offer a pet peeve, which is I can't refuse to accept server pushes, and the stop button doesn't really seem to affect them. I should be able to prevent keep-alive if I don't want it.)
Its possible that you could configure a null helper app for the multipart/x-mixed-replace content-type, but I've not tried it, and have no idea if it will work. --Jeff -- Jeff Weinstein - Electronic Munitions Specialist Netscape Communication Corporation jsw@netscape.com - http://home.netscape.com/people/jsw Any opinions expressed above are mine.
participants (2)
-
Adam Shostack -
Jeff Weinstein