Re: [Ids-devel] Users' suggestions

[Daniel M. <dtm...@ho...>]

"Anthony A. D. Talltree" <aa...@ta...> writes:

> > Do we want to require javascript-capable browsers?
> 
> NoNoNo PLEASE No.  Java causes Netscrape to dump core.

Java != Javascript.  In fact, the two have little relationship at all,
other than the fact that the Java hype was just getting started when
Netscape needed a name for its scripting language.

> >Create the abilty to upload a zip file
> 
> I vote no on this for security reasons.  A zip file could contain *anything*.

I don't understand the security implications here.  What scenario are
you using IDS for, where people wouldn't already have the ability to
upload arbitrary files by other means?  Also, whose security is
compromised by this?