I think RJ has a good point - some webmasters have misunderstood the SCI
documentation and implemented an insecure solution.

As for ways to patch up these security holes - Jay W. has most eloquently
explained several possible routes in his email to the list of december 15th.
These all involve using the SCI properly or signing up with a provider (like
mals-e.com) who does. If you want to help, you can forward Jay's message to
those webmasters.

There's no point changing the SCI, it's state of the art and meant for people
who know what they're doing. Any possible improvements are not really relevant
to this issue.

But (if it's not in there already) a note about all this in the documentation
might do some good.

Glad we all agree,

--Luc Van den Borre


---
You are currently subscribed to e-gold-list as: archive@jab.org
To unsubscribe send a blank email to [EMAIL PROTECTED]

http://www.e-gold.com/stats.html lets you observe the e-gold system's activity now!

Reply via email to