[gopher] Capability files are dangerous

Cameron Kaiser spectre at floodgap.com
Mon May 14 16:14:01 UTC 2012


> > For most servers, caps.txt will be just another file. Only Bucktooth and
> > Gophernicus generate it by pseudoselector. The server has no idea who is
> > fetching caps.txt and for what purpose.
> 
> Actually.... The original poster was somewhat correct with that assumption.
> I can now fairly reliably determine between UMN gopher client, Overbite
> (the latest betas) and other gopher clients.

How so? UMN has its idiosyncrasy about G+, but OverbiteFF and the Floodgap
proxy should be nearly indistinguishable (and when I add caps to Overbite
Android, it will be implemented in nearly the same way as OverbiteFF).

Again, not like I'm terribly worried, but I don't want to make the client
unnecessarily *easy* to fingerprint.

-- 
------------------------------------ personal: http://www.cameronkaiser.com/ --
  Cameron Kaiser * Floodgap Systems * www.floodgap.com * ckaiser at floodgap.com
-- Life is like a simile. -----------------------------------------------------



More information about the Gopher-Project mailing list