[2469] in WWW Security List Archive
Re:- cookies and privacy
daemon@ATHENA.MIT.EDU (Tom Fetherston)
Fri Jul 19 18:26:58 1996
Date: Fri, 19 Jul 1996 09:20:13 -0400 (EDT)
From: Tom Fetherston <tdf@ble.org>
To: www-security@ns2.rutgers.edu
In-Reply-To: <2.2.32.19960717222356.014c42a8@mail.software.net>
Errors-To: owner-www-security@ns2.rutgers.edu
Enough with the cookies already!!! It'd be nice to have a summary of
this thread, and then to have it DIE so the rest of us can go on with our
lives.
Suggested summary headers:
A. What is the security risk/threat of 1) implementing cookie distribution
2) receiving cookes with your browser?
B. Can a cookie server possibly write to other files besides the
cookie database?
C. How can the risk/threat be minimized or eliminated?
Other side issues, such as social and privacy moralizing, though
important in the grand scheme, can be moved to
alt.to.whom.it.may.concern. Or, somebody can take the email addresses
from messages on the subject sent to this list and create a new list;
perhaps called "cookie-whining@whatever.blah.blah".
Tom Fetherston, System Administrator, Online Services
Brotherhood of Locomotive Engineers, Education and Training Department
mailto:tdf@ble.org http://dialup.oar.net/~ble/