[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

Re: Re: Cookies at XML Europe 2004 -- Call for Particip ati

• To: Robert Koberg <rob@k...>
• Subject: Re: Re: Cookies at XML Europe 2004 -- Call for Particip ation
• From: Elliotte Rusty Harold <elharo@m...>
• Date: Mon, 5 Jan 2004 23:22:24 -0500
• Cc: XML-DEV <xml-dev@l...>
• In-reply-to: <3FFA260B.902@k...>
• References: <Pine.LNX.4.44L0.0401051922020.4127-100000@s...><p06010202bc1fcbf7b9a4@[192.168.254.4]> <3FFA260B.902@k...>

At 7:05 PM -0800 1/5/04, Robert Koberg wrote:

>>  In a truly individualized situation all that's needed are URLs of 
>>the form http://www.example.com/page.html?username=elharo
>
>
>Does your bank do this? If so, which bank do you use?
>In other words, do you care if someone who knows or guesses your 
>username can access your individualized situation?


You're missing a crucial point. The password which is also necessary 
for access is not included in the URL. The URI identifies the 
resource but it is not sufficient for access to the resource (unless 
that's what you want of course. There are less sensitive situations 
where I might well want to expose the contents of a personalized page 
to the world; e.g. my wish list at amazon.com)

-- 

   Elliotte Rusty Harold
   elharo@m...
   Effective XML (Addison-Wesley, 2003)
   http://www.cafeconleche.org/books/effectivexml
   http://www.amazon.com/exec/obidos/ISBN%3D0321150406/ref%3Dnosim/cafeaulaitA

• Follow-Ups:
  • Re: Re: Cookies at XML Europe 2004 -- Call for Particip ation
    • From: Robert Koberg <rob@k...>

• References:
  • RE: Re: Cookies at XML Europe 2004 -- Call for Particip ation
    • From: Rich Salz <rsalz@d...>
  • RE: Re: Cookies at XML Europe 2004 -- Call for Particip ation
    • From: Elliotte Rusty Harold <elharo@m...>
  • Re: Re: Cookies at XML Europe 2004 -- Call for Particip ation
    • From: Robert Koberg <rob@k...>

• Prev by Date: Re: SAX and ignorableWhitespace
• Next by Date: Re: Re: Cookies at XML Europe 2004 -- Call for Particip ation
• Previous by thread: Re: Re: Cookies at XML Europe 2004 -- Call for Particip ation
• Next by thread: Re: Re: Cookies at XML Europe 2004 -- Call for Particip ation
• Index(es):
  • Date
  • Thread