[2469] in WWW Security List Archive

home help back first fref pref prev next nref lref last post

Re:- cookies and privacy

daemon@ATHENA.MIT.EDU (Tom Fetherston)
Fri Jul 19 18:26:58 1996

Date: Fri, 19 Jul 1996 09:20:13 -0400 (EDT)
From: Tom Fetherston <tdf@ble.org>
To: www-security@ns2.rutgers.edu
In-Reply-To: <2.2.32.19960717222356.014c42a8@mail.software.net>
Errors-To: owner-www-security@ns2.rutgers.edu

Enough with the cookies already!!!  It'd be nice to have a summary of 
this thread, and then to have it DIE so the rest of us can go on with our 
lives.

Suggested summary headers:

A.  What is the security risk/threat of 1) implementing cookie distribution 
2) receiving cookes with your browser?

B.  Can a cookie server possibly write to other files besides the 
cookie database?

C.  How can the risk/threat be minimized or eliminated?

Other side issues, such as social and privacy moralizing, though 
important in the grand scheme, can be moved to 
alt.to.whom.it.may.concern.  Or, somebody can take the email addresses 
from messages on the subject sent to this list and create a new list; 
perhaps called "cookie-whining@whatever.blah.blah".

 Tom Fetherston, System Administrator, Online Services
 Brotherhood of Locomotive Engineers, Education and Training Department
 mailto:tdf@ble.org  http://dialup.oar.net/~ble/



home help back first fref pref prev next nref lref last post