On 8/15/06 12:43 AM "Tony Crockford" <[EMAIL PROTECTED]> sent this out:

>> It's not a question of users' stupidity! It's a matter of if *I* feel that a
>> new window is the best way to present the information!
> 
> I'm aghast at such an attitude on a web *standards* list.

You've missed the point. There are many secure transaction et al scenarios
that pretty much require new windows. See Steve Olive's follow-on post. I've
quoted it below for your viewing pleasure. :-)

Whatever... my "feelings" are not hurt! ;-)

Rick

---- Steve Olive's response ----

There are very good reasons to open new windows, not just when using frames,
online banking being one of them. Opening a new window, secured with SSL
encryption and breaking this connection by closing the window when "logging
off". Usually all browser buttons, address bars, menus are turned off on
these windows so there is no way a user can change to "normal" surfing of
the 
Internet thus preventing any history security issues.

By removing "target=_blank" you are forcing the use of JavaScript to open
the 
window. This usually isn't an issue because JavaScripts are used for other
features, but it should not be necessary just to generate secure sessions.

I'm sure there are other secure online transactions that need this feature
and 
are stopped from using strict doctypes (XHTML or HTML) because of this
feature is removed.

Opening new windows for secure sessions makes me feel very 21st Century -
the 
developers are understanding the security risks presented by the wide spread
adoption of online life.

-- 
Regards,

Steve
Bathurst Computer Solutions
URL: www.bathurstcomputers.com.au
e-mail: [EMAIL PROTECTED]
Mobile: 0407 224 251



******************************************************
The discussion list for  http://webstandardsgroup.org/

 See http://webstandardsgroup.org/mail/guidelines.cfm
 for some hints on posting to the list & getting help
******************************************************

Reply via email to