WebApp Sec mailing list archives

Re: advice needed - secure transfer of client details


From: Richard Moore <rich () westpoint ltd uk>
Date: Tue, 02 Nov 2004 13:00:10 +0000



Tim James wrote:
This is a brain teaser. I have an application to
review which supplies details from the client's
workstation (derived from files on disk, hostname, IP
address). It currently implements a Java applet whose
job is to obtain these details and send them up to the
server in an ordinary HTTP POST.

You can at least get the IP address at the server end by examining
the peer address of the socket the POST request comes in on.

Cheers

Rich.
--
Richard Moore, Principle Software Engineer,
Westpoint Ltd,
Albion Wharf, 19 Albion Street, Manchester, M1 5LN, England
Tel: +44 161 237 1028
Fax: +44 161 237 1031


Current thread: