NODE a6b760f8Microsoft Internet Explorer: Request for Comments
Fisher Mark <FisherM@exch1.indy.tce.com>Thu, 29 Jan 1998 05:01:56 +0800
(taking a deep breath, and donning a flame-resistant Kevlar suit...)
We are meeting with Microsoft tomorrow (1/29, 10am EST) to discuss the
problems in and needed enhancements for Internet Explorer 4.x. If
anyone would care to pass along their comments, I would welcome them.
Note that I would prefer serious comments, although any that are both
sufficiently humorous and not too defamatory towards Microsoft might
also be passed along. (We currently have lists of 73 bugs and 27
enhancement requests...)
==========================================================
Mark Leighton Fisher Thomson Consumer Electronics
fisherm@indy.tce.com Indianapolis, IN
"Browser Torture Specialist, First Class"
NODE 82a30e4cRe: Microsoft Internet Explorer: Request for Comments
John Blair <jdblair@frodo.tucc.uab.edu>Thu, 29 Jan 1998 06:19:55 +0800
-----BEGIN PGP SIGNED MESSAGE-----
FisherM@exch1.indy.tce.com said:
> (taking a deep breath, and donning a flame-resistant Kevlar suit...)
> We are meeting with Microsoft tomorrow (1/29, 10am EST) to discuss the
> problems in and needed enhancements for Internet Explorer 4.x. If
> anyone would care to pass along their comments, I would welcome them.
> Note that I would prefer serious comments, although any that are both
> sufficiently humorous and not too defamatory towards Microsoft might
> also be passed along. (We currently have lists of 73 bugs and 27
> enhancement requests...)
Suggest that Microsoft encourage peer review of of the portions of IE
used for encryption and authentication by publishing the source code
used to implement these functions. The quality of the code would
certainly improve (I don't believe it could get worse ;) if MS
incorporated suggestions in a timely matter. Such a move would also
do much to improve Microsoft's reputation in the "hacker" community
(that's "hacker" in the good sense, not the intruder/cracker/vandal
sense) by showing that they understand that "security through
obscurity is no security." If Microsoft (and other companies) hear
about the need to do this often enough from enough different source,
perhaps they will begin to listen.
-john.
......................................................................
. .
.....John.D.Blair... mailto:jdblair@uab.edu phoneto:205.975.7123 .
. http://frodo.tucc.uab.edu faxto:205.975.7129 .
..sys|net.admin.... .
. the university computer center .....
..... g.e.e.k.n.i.k...the.university.of.alabama.at.birmingham....
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3a
Charset: noconv
iQCVAwUBNM+r9AJjTpK3AXhBAQEvBgQAgzqpF/qJKZL10RjcB7ixI2LMQQMHejpN
3L2/97d2wvin7amtdIgyhELnSdkaTmwZsqkbfwinlg/ay0lXx9ygFLgbcC/AsIef
54vbPat3Btu+vTrINRZOomQF85LezlTDKt6fznUaoWqCOGu9L0FeiMPSN9WqY6uG
OZg3ZVf/nvY=
=j4oQ
-----END PGP SIGNATURE-----