Re: Active X

[Ken Hardy <ken () bridge com>]

This month's Crypto-gram from Bruce Schneier includes some
interesting discussion of possible attacks against the
integrity of digital signatures.  Back issues are available at
www.counterpane.com, but I don't think June's issue is posted
yet.  It always makes good reading.

  -- KH


On Thu, 17 Jun 1999, Wong Chun Meng wrote:

> Many of us know that ActiveX is a hazard to network security. But how many
> of you (or advise your clients) do actually block out incoming activeX into
> your networks? The reason I ask is because some of the development work
> conducted by my programmers require clients to download an activeX control
> from my website. Is activeX really such a widespread problem in a corporate
> environment to the extent that many block it off? And how far can one trust
> an activeX certified by microsoft or verisign etc?  
>
> TIA for any insight into this matter..
>
> Regards,
> Wong.