• To: rjm@z...
• Subject: Re: Expertise and Innovation - was Re: Non-Borgservers can authenticate Borg clients (Was Re: Re: Cookies atXML Europe 2004 -- Call for Participation)
• From: Rich Salz <rsalz@d...>
• Date: Wed, 04 Feb 2004 15:28:06 -0500
• Cc: "'xml-dev@l... '" <xml-dev@l...>
• In-reply-to: <1075923822.2650.4.camel@z...>
• References: <Pine.LNX.4.44L0.0401100752020.21696-100000@s...> <4020FCE9.3030203@a...> <1075923822.2650.4.camel@z...>
• User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4b) Gecko/20030507

> but my commonwealth bank site does time out sessions and so does
> qantas... isn't this an application problem rather than browser problem

Those sites are using cookies.  They are not using the HTTP 
authentication methods.

You might find it worthwhile to read the archived discussion between 
Elliott and I from a few weeks ago.

	/r$
-- 
Rich Salz, Chief Security Architect
DataPower Technology                           http://www.datapower.com
XS40 XML Security Gateway   http://www.datapower.com/products/xs40.html
XML Security Overview  http://www.datapower.com/xmldev/xmlsecurity.html

• References:
  • Re: Expertise and Innovation - was Re: Non-Borgservers can authenticate Borg clients (Was Re: Re: Cookies atXML Europe 2004 -- Call for Participation)
    • From: Alaric B Snell <alaric@a...>
  • Re: Expertise and Innovation - was Re: Non-Borg servers can authenticate Borg clients (Was Re: Re:Cookies at XML Europe 2004 -- Call for Participation)
    • From: Rick Marshall <rjm@z...>

• Prev by Date: Re: XML 1.1 and friends are now W3C Recommendations
• Next by Date: Re: Can A Web Site Be Reliably Defended Against DoS Attacks?
• Previous by thread: Re: Expertise and Innovation - was Re: Non-Borg servers can authenticate Borg clients (Was Re: Re:Cookies at XML Europe 2004 -- Call for Participation)
• Next by thread: Fun with regular expressions
• Index(es):
  • Date
  • Thread