On Wed, Aug 6, 2014 at 2:58 PM, Joe Yoder <[email protected]> wrote:


> When I viewed source at the sign in
> page of the GFS.com site I found no reference to userAgent.


Yeah, you wouldn't see it there. The login form submits the user ID and
password to the application (a JSP app called autologin) which is likely
where the processing takes place. You can't see this code in your browser;
it's part of their backend web application.


>  I realize that
> I probably need to learn a lot more before I can be sure that the
> application is not looking at the userAgent information but wonder if I am
> even looking for the right thing.
>
>    - Is it possible that the application simply attempts an SSL connection
>    and throws a "Browser/Operating System not supported" message if none
> can
>    be established?
>

It's possible, certainly. It's a known variant of Murphy's Law that
"anything a programmer can do wrong, a programmer has done wrong."

This could be a case where the programmers have a "white list" of known
browser versions, types and characteristics, and your browser isn't meeting
their criteria.  Or a blacklist of forbidden versions, which yours might be.

Besides the "user agent" string, there are a number of other properties
passed back and forth about what the browser will and will not accept and
what the server is capable of sending, and it's possible your browsers
don't meet those criteria. Perhaps Java is required and is disabled on the
server, or the version of the browser you are using on the server isn't up
to snuff.



>    - Is there a valid reason that an application should refuse a connection
>    from a Terminal Services session if the browser in that session supports
>    the appropriate SSL connection?
>

I can't think of one off the top of my head, as I've never tried such an...
inventive solution. However, it's pretty much up to the client what they
want to do with their web site. In the middle of the bad-old browser wars,
I offered a client a significant discount for an in-house app if they
agreed to only run it in Firefox, as it eliminated a lot of tedious
testing.

My suggestion is to contact the vendor and find out if you can talk to
someone on the technical staff about their specific requirements.



-- 
Ted Roche
Ted Roche & Associates, LLC
http://www.tedroche.com


--- StripMime Report -- processed MIME parts ---
multipart/alternative
  text/plain (text body -- kept)
  text/html
---

_______________________________________________
Post Messages to: [email protected]
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: 
http://leafe.com/archives/byMID/profox/CACW6n4uA_AsuK9GvVdE=shvwqy8wch54ij2vbckxj-ctzjx...@mail.gmail.com
** All postings, unless explicitly stated otherwise, are the opinions of the 
author, and do not constitute legal or medical advice. This statement is added 
to the messages for those lawyers who are too stupid to see the obvious.

Reply via email to