RE: Pulling up instructions for authentication

> From: Espen Lyngaas [SMTP:Espen.Lyngaas@colorline.no]
>
>
> However, there are ways of getting the browser to ask for a second page
> automatically with a client pull.
>
        If you mean Refresh, it is non-standard (not in HTTP or HTML
        specifications). If you mean Javascript, there are lots of
        security issues.

        In any case, for the protocol to work correctly, it would have
        to refresh to the same URL, meaning that you would have to provide
        state information (caches aren't expected to add cookies - this
might
        even be considered a man in the middle attack on the primary site -
        and cookies have privacy issues).
Received on Wed Nov 03 1999 - 06:49:55 MST