Re: [WEB SECURITY] Re: Minimal User Interaction with Links

["51l3n73y3s" <51l3n7 () live in>]

Bil,

Now it's crystal. Thank you so much, I somehow didn’t get that at bugzilla.

-Sandeep Cheema

--------------------------------------------------
From: "Bil Corry" <bil () corry biz>
Sent: Monday, August 17, 2009 11:48 PM
To: "51l3n73y3s" <51l3n7 () live in>
Cc: "Schmidt, Chris" <cschmidt () servicemagic com>; "Steven M. Christey" 
<coley () linus mitre org>; <micheal.espinola () gmail com>; 
<security-basics () securityfocus com>; <websecurity () webappsec org>
Subject: Re: [WEB SECURITY] Re: Minimal User Interaction with Links

> 51l3n73y3s wrote on 8/17/2009 12:14 PM:
> > You got it wrong too.The certificate is popping right after the "google"
> > search, not after clicking on any of the links. I have attached the
> > screenshot at the bugzilla link mentioned before.
>
> Google includes a prefetch link for the search first result which causes 
> Firefox to prefetch the URL.  You can disable this behavior in Firefox by 
> going to "about:config", filter on "network.prefetch-next" and set it to 
> "false".  More info here:
>
> http://kb.mozillazine.org/Network.prefetch-next
> https://developer.mozilla.org/en/Link_prefetching_FAQ
>
> That second URL mentions pre-fetching on HTTPS was originally disabled for 
> security reasons, but in FF3.5 was enabled.  Perhaps you could make the 
> argument that it should be disabled again via your bug.
>
>
> - Bil

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------