RE: [WEB SECURITY] Fundamental error in Corsaire's paper?

["Armag" <armag666@xxxxxxxxxxxxx>]

On Fri, 28 Apr 2006 21:01:34 +0200, "Amit Klein (AKsecurity)"
<aksecurity@xxxxxxxxxx> said:
> On 28 Apr 2006 at 17:50, Martin O'Neal wrote:
> 
> > 
> > > Hmmmm... - not too common, so it seems.
> > 
> > Well, MS often tend to be the spanner in the ointment when it comes to
> > standards compliance, but even if you accept all of those MS vagaries,
> > this is still counter evidence to the blanket "There is no such thing as
> > path security" statement.  Granted, the practical worth of it today
> > (with the browser issues in evidence) is limited. ;)
> > 
> 
> OK, if that's the counter example, I can live with it ;-)
> 

What is the final verdict, the original topic of this thread? 
The Corsaire article - is there a fundamental error in the
recommendation part of it?
-- 
  Armag
  armag666@xxxxxxxxxxxxx

-- 
http://www.fastmail.fm - Accessible with your email software
                          or over the web


---------------------------------------------------------------------
The Web Security Mailing List
http://www.webappsec.org/lists/websecurity/

The Web Security Mailing List Archives
http://www.webappsec.org/lists/websecurity/archive/