[11539] in www-talk@info.cern.ch
Security: Cookies
daemon@ATHENA.MIT.EDU (Joris Dobbelsteen)
Sat Mar 18 17:48:01 2000
From: "Joris Dobbelsteen" <j.p.tdobbelsteen@freeler.nl>
To: <www-talk@w3.org>
Date: Sat, 18 Mar 2000 23:44:17 +0100
Message-Id: <000201bf912b$7fd2b5c0$0d0aa8c0@Thuis.local>
Mime-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Resent-From: www-talk@w3.org
Last I heard about privacy violation by use of cookies:
- They should provide a web server with personal information about you
- provide Web Server Administrators (and authorized users) with information
about the web server usage from a specific user or all users.
The guy was on the radio and complained cookies where a real violation to
his privacy and turned it off, also he said servers should announce that
they are using cookies. RFC 2616 (HTTP/1.1 - June 1999) and another document
discussing HTTP/1.1 did not mension cookies, and they don't see to be
standard (???) or this is part of HTML (???).
I desided that monitoring what users like can be done much easier by logging
the links clicked (redirection) and using counters.
Maybe other HTTP/1.1 parts provide much greater security vulabilities:
user-agent, server, via, from, etc.....
Can I have some more info about this???
Joris
