Re: THREE STRIKES...

[Nicolas MONNET]

Ahem, now if we have to take AOL users into account ... j/k.

Actually, I don't see how cookies could be implemented; if the attacker
rejects cookies, how are you going to do it? ... 



On Fri, 7 Apr 2000, Mark Imbriaco wrote:

|What about folks who are behind proxies?  (ie: AOL) It is not all that far
|fetched to consider that an attacker and a legitimate user could both be
|coming from AOL -- neiter is it farfetched to consider that they may be
|assigned the same proxy server on the AOL network.
|
|There ARE workarounds to the issue, my point was simply that Vivek's
|cookie idea is probably the best of the (admittedly numerous) bunch.