Welcome to WebmasterWorld Guest from 54.197.116.116

Forum Moderators: incrediBILL

Message Too Old, No Replies

New Browser Security Handbook from Google Code

   
5:52 am on Dec 12, 2008 (gmt 0)

WebmasterWorld Senior Member tedster is a WebmasterWorld Top Contributor of All Time 10+ Year Member



Here's a new release from Google Code that I'm really getting into - the online Browser Security Handbook.

This document is meant to provide web application developers, browser engineers, and information security researchers with a one-stop reference to key security properties of contemporary web browsers. Insufficient understanding of these often poorly-documented characteristics is a major contributing factor to the prevalence of several classes of security vulnerabilities.

Although all browsers implement roughly the same set of baseline features, there is relatively little standardization - or conformance to standards - when it comes to many of the less apparent implementation details. Furthermore, vendors routinely introduce proprietary tweaks or improvements that may interfere with existing features in non-obvious ways, and seldom provide a detailed discussion of potential problems.

[code.google.com...]

There are three main sections to the online handbook:
Part 1: Basic concepts behind web browsers
Part 2: Standard browser security features
Part 3: Experimental and legacy security mechanisms

I've never worked on developing a browser, but this is valuable information for me, too, as it clears up a lot of my "black box" thinking.

6:24 am on Dec 12, 2008 (gmt 0)

WebmasterWorld Senior Member 5+ Year Member



Excellent reading material, thanks tedster.

Reading information like this makes me feel like my friends when they set their browser to disable third party cookies for the first time and they start seeing dozens of cookie requests as they browse. They had no idea how much gets placed on their computer much like I'm about to be saying "I had no idea" while reading that.

7:14 am on Dec 12, 2008 (gmt 0)

WebmasterWorld Senior Member vincevincevince is a WebmasterWorld Top Contributor of All Time 10+ Year Member



Very interesting. I am going to copy & paste some of those tables into a fast-reference sheet.