[gopher] Capability files are dangerous
Nuno J. Silva
nunojsilva at ist.utl.pt
Mon May 14 18:32:02 UTC 2012
On 2012-05-14, Cameron Kaiser wrote:
>> > As caps.txt is server side, I fail to how it relates to servering data
>> > to a client, the server has no ideer what its talking to, unlike
>> > useragent string in http world.
>>
>> Well, I see how you could identify a client through which
>> CAPS-advertised features it supports.
>
> Potentially, but only if the feature requires server interaction other than
> fetching the caps.txt file. For example, breadcrumb menus don't.
True. Just like, for example, if that mime-type field was used by some
server and advertised through caps.txt, it wouldn't be traceable, it
would just change the way the client parses the menu.
--
Nuno J. Silva (aka njsg)
gopher://sdf-eu.org/1/users/njsg
http://njsg.sdf-eu.org/
More information about the Gopher-Project
mailing list