From: Jeff Weinstein <jsw@netscape.com>
Date: Sun, 5 May 1996 12:50:09 +0800
To: Lucky Green <shamrock@netcom.com>
Subject: Re: Why I dislike Java. (was Re: "Scruffies" vs. "Neats")
In-Reply-To: <v02120d09adb0070b090c@[192.0.2.1]>
Message-ID: <318BF5E8.2A78@netscape.com>
MIME-Version: 1.0
Content-Type: text/plain


Lucky Green wrote:
> 
> At 23:37 5/2/96, Jeff Weinstein wrote:
> >Perry E. Metzger wrote:
> >> Netscape with Java cannot be so tested because important components
> >> come down off the net.  So no, I'm not holding Netscape with Java to a
> >> higher standard. I'm very much holding it to the same standard.
> >
> >  The Netscape Administration Kit will allow a site security admin
> >to create a configuration that disables Java, and does not allow the
> >user to enable it.  If your customers require netscape, perhaps this
> >is an option that will make you more comfortable.
> 
> Does it prevent the user from downloading an unrestricted copy from
> Netscape's ftp site or installing one brought from home?

  Yes.  One of the things that you can configure is an addition to the
user agent string, so xyz corp can make it Mozilla/3.0XYZ.  You can then
configure your proxies and servers to only accept clients with that string. 
Note that this is not 100% hack proof.  Someone on your network who knew
what they were doing could circumvent this by hacking their own browser,
but it will keep normal users from subverting the system.

	--Jeff

-- 
Jeff Weinstein - Electronic Munitions Specialist
Netscape Communication Corporation
jsw@netscape.com - http://home.netscape.com/people/jsw
Any opinions expressed above are mine.