W3C home > Mailing lists > Public > w3c-wai-ig@w3.org > July to September 2000

RE: ssl and lynx_w32?

From: Bailey, Bruce <Bruce_Bailey@ed.gov>
Date: Thu, 14 Sep 2000 08:52:05 -0400
Message-ID: <AF196F44735ED411B93A00508BDFB1080E425A@WDCROBEXC09>
To: "'w3c-wai-ig@w3.org'" <w3c-wai-ig@w3.org>
Cc: "'Dave J Woolley'" <DJW@bts.co.uk>
Personally, I have never encountered a site that required SSL that did also
require JavaScript.  Seems to me that Lynx users are still being
unnecessarily discriminated against.

> One other point to bear in mind is that some 
> web sites insist on specific browsers being used
> for SSL.  Part of the reasoning for this is that
> they want someone to blame if there is a security
> breach.  Some Lynx users forge the User Agent to
> get into those site, but, in my view, anyone doing
> so would be at risk of being accused of fraud (the
> sites tend to be financial organisations).
> (There is a tradeoff here between the fact that there
> is a company with a reputation to protect behind
> commercial browsers and the open source nature of
> things like Lynx allowing independent verification.
> In these plug and play days, it would not be difficult
> for someone to distribute a compromised binary of an
> open source program.)
Received on Thursday, 14 September 2000 08:52:45 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 20:35:57 UTC