[Ach] Idea: catching old clients with sni

christian mock cm at coretec.at
Thu Nov 14 17:58:08 CET 2013


On Tue, Nov 12, 2013 at 07:08:30PM +0100, Pepi Zawodsky wrote:

> Are there _really_ any Browsers written in Java that people actually
> use? Or is Java “only” used to access Web-APIs? In the latter case
> one could specifically narrow access without impacting common
> browsers. Or am I totally thinking in the wrong direction here? (Or
> is it just that I'm allergic to Java that I try to find excuses to
> not support it?)

I often see java used as applets or webstart applications -- which
means the java code comes from the very webserver we're configuring,
but the JRE and its capabilities on the clients do not.

The other java use is machine to machine communication, where it is
more probably that both ends of the channel are under the same
control.

cm.

-- 
Christian Mock                          Wiedner Hauptstr. 15
Senior Security Engineer                1040 Wien
CoreTEC IT Security Solutions GmbH      +43-1-5037273
FN 214709 z

.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.
CoreTEC: Web Application Audit - Damit so etwas nicht passiert!

http://heise.de/-1260559

.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.



More information about the Ach mailing list