Re: Why I dislike Java. (was Re: "Scruffies" vs. "Neats")

At 23:37 5/2/96, Jeff Weinstein wrote:
>Perry E. Metzger wrote:
>> Netscape with Java cannot be so tested because important components
>> come down off the net.  So no, I'm not holding Netscape with Java to a
>> higher standard. I'm very much holding it to the same standard.
>
>  The Netscape Administration Kit will allow a site security admin
>to create a configuration that disables Java, and does not allow the
>user to enable it.  If your customers require netscape, perhaps this
>is an option that will make you more comfortable.

Does it prevent the user from downloading an unrestricted copy from
Netscape's ftp site or installing one brought from home?


Disclaimer: My opinions are my own, not those of my employer.

-- Lucky Green <mailto:shamrock@netcom.com>
   PGP encrypted mail preferred.

> Does it prevent the user from downloading an unrestricted copy from
> Netscape's ftp site or installing one brought from home?
> 

	No, but that's what policies like "We find Netscape 2.0 on
your machine and you are fired the next day" are for.
	(I know of one major silicon valley computer manufacturer with
such a policy. Others probably exist as well.)

-- 
Sameer Parekh					Voice:   510-601-9777x3
Community ConneXion, Inc.			FAX:     510-601-9734
The Internet Privacy Provider			Dialin:  510-658-6376
http://www.c2.net/ (or login as "guest")		sameer@c2.net

Lucky Green wrote:
> 
> At 23:37 5/2/96, Jeff Weinstein wrote:
> >Perry E. Metzger wrote:
> >> Netscape with Java cannot be so tested because important components
> >> come down off the net.  So no, I'm not holding Netscape with Java to a
> >> higher standard. I'm very much holding it to the same standard.
> >
> >  The Netscape Administration Kit will allow a site security admin
> >to create a configuration that disables Java, and does not allow the
> >user to enable it.  If your customers require netscape, perhaps this
> >is an option that will make you more comfortable.
> 
> Does it prevent the user from downloading an unrestricted copy from
> Netscape's ftp site or installing one brought from home?

  Yes.  One of the things that you can configure is an addition to the
user agent string, so xyz corp can make it Mozilla/3.0XYZ.  You can then
configure your proxies and servers to only accept clients with that string. 
Note that this is not 100% hack proof.  Someone on your network who knew
what they were doing could circumvent this by hacking their own browser,
but it will keep normal users from subverting the system.

	--Jeff

-- 
Jeff Weinstein - Electronic Munitions Specialist
Netscape Communication Corporation
jsw@netscape.com - http://home.netscape.com/people/jsw
Any opinions expressed above are mine.