W3C home > Mailing lists > Public > w3c-wai-ig@w3.org > July to September 2000

RE: ssl and lynx_w32?

From: Charles McCathieNevile <charles@w3.org>
Date: Thu, 14 Sep 2000 08:58:41 -0400 (EDT)
To: "Bailey, Bruce" <Bruce_Bailey@ed.gov>
cc: "'w3c-wai-ig@w3.org'" <w3c-wai-ig@w3.org>, "'Dave J Woolley'" <DJW@bts.co.uk>
Message-ID: <Pine.LNX.4.21.0009140857270.17125-100000@tux.w3.org>
I have found many such sites. For example, to make secured purchases at
Amazon.com it is not necessary to run javascript, but SSL is necessary
(although they also provide the option of an insecure purchase).

I am sure there are many others.

Charles McCN

On Thu, 14 Sep 2000, Bailey, Bruce wrote:

  Personally, I have never encountered a site that required SSL that did also
  require JavaScript.  Seems to me that Lynx users are still being
  unnecessarily discriminated against.
  
  > One other point to bear in mind is that some 
  > web sites insist on specific browsers being used
  > for SSL.  Part of the reasoning for this is that
  > they want someone to blame if there is a security
  > breach.  Some Lynx users forge the User Agent to
  > get into those site, but, in my view, anyone doing
  > so would be at risk of being accused of fraud (the
  > sites tend to be financial organisations).
  > 
  > (There is a tradeoff here between the fact that there
  > is a company with a reputation to protect behind
  > commercial browsers and the open source nature of
  > things like Lynx allowing independent verification.
  > In these plug and play days, it would not be difficult
  > for someone to distribute a compromised binary of an
  > open source program.)
  

-- 
Charles McCathieNevile    mailto:charles@w3.org    phone: +61 (0) 409 134 136
W3C Web Accessibility Initiative                      http://www.w3.org/WAI
Location: I-cubed, 110 Victoria Street, Carlton VIC 3053, Australia
September - November 2000: 
W3C INRIA, 2004 Route des Lucioles, BP 93, 06902 Sophia Antipolis Cedex, France
Received on Thursday, 14 September 2000 08:58:54 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Tuesday, 19 July 2011 18:13:49 GMT