[gopher] Capability files are dangerous

Nuno J. Silva nunojsilva at ist.utl.pt
Mon May 14 18:32:02 UTC 2012


On 2012-05-14, Cameron Kaiser wrote:

>> > As caps.txt is server side, I fail to how it relates to servering data
>> > to a client, the server has no ideer what its talking to, unlike
>> > useragent string in http world.
>> 
>> Well, I see how you could identify a client through which
>> CAPS-advertised features it supports.
>
> Potentially, but only if the feature requires server interaction other than
> fetching the caps.txt file. For example, breadcrumb menus don't.

True. Just like, for example, if that mime-type field was used by some
server and advertised through caps.txt, it wouldn't be traceable, it
would just change the way the client parses the menu.

-- 
Nuno J. Silva (aka njsg)
gopher://sdf-eu.org/1/users/njsg
http://njsg.sdf-eu.org/



More information about the Gopher-Project mailing list