full-disclosure - Interesting side effect of the new IE patch

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu)
Subject: Interesting side effect of the new IE patch 

On Thu, 05 Feb 2004 23:35:27 +0100, Stefan Esser said:
> blind of hatred like you obviously are. All standard browsers support
> the http://username:password@... . THIS makes it a standard, no matter
> what the bloody RFC writes. The majority of people liked adding
> username:password to the URL, so it was implemented into all browsers
> and became a standard. That the RFC was not updated is not the fault
> of Microsoft. If the community had not accepted this as standard it
> would not be in other browsers (like mozilla), too. 

Do the research.  Who did it first?  Then ask yourself what *real* choice
the other browsers had.  Microsoft breaks the standard in the browser, then
probably put the same cretinwork hack into their web authoring tools.

And now you find that if you want to get to certain sites, you need to use
a bug-compatible browser.

Sure, you *always* have your choice of which end of the couch to sit on. But
are you really recommending that while making your choice, you ignore the
seating choice of the 800 pound gorilla?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040205/8223bbca/attachment.bin