Fine-Tune Your Web Site for Windows XP Service Pack 2

[Kathleen Anderson [MVP - FP]]

Some reading material for you folks:
http://msdn.microsoft.com/security/default.aspx?pull=/library/en-us/dnwxp/html/xpsp2web.asp

 

[Mark Fitzpatrick]

In addition, I've found that some GIF files that use an exact pallette and
not an adaptive one fail to display so keep an eye on those GIF's.

Mark Fitzpatrick
Microsoft MVP - FrontPage

 

[clintonG]

Thanks Kathleen but what kind of idiot do you suppose considers
security something to consider 'after the fact' as this excerpt from
the MSDN article indicates...

"In SP2 the publisher information will be shown after downloading a
file type that can potentially harm the user's computer and can be signed.
(Common examples of file types that can be signed and that can
potentially harm the user's computer are .exe, .dll, .ocx, .msi)."

 

[Kathleen Anderson [MVP - FrontPage]]

Thanks Kathleen but what kind of idiot do you suppose considers
security something to consider 'after the fact' as this excerpt from
the MSDN article indicates...

"In SP2 the publisher information will be shown after downloading a
file type that can potentially harm the user's computer and can be
signed.
(Common examples of file types that can be signed and that can
potentially harm the user's computer are .exe, .dll, .ocx, .msi)."

Clinton:
I'm not sure what the statement you refer to means. I just downloaded two
..exes on a machine with SP-2 installed. IE let me do this after I said it
was OK - I saw nothing about publisher information before or after the
download.

 

[clintonG]

Downloading executables only to be told 'afterwords' that they
may pose a risk is not secure -- secure is never allowing the file
to reach the file system until the file and its credentials have
been scrutinized.

--
<%= Clinton Gallagher, "Twice the Results -- Half the Cost"
Architectural & e-Business Consulting -- Software Development
NET (e-mail address removed)
URL http://www.metromilwaukee.com/clintongallagher/

 

[Thomas A. Rowe]

Windows can not detect the actual file type until after the file has been actually downloaded. AV
applications work the same way, files are scanned after they are in the file system.

--
==============================================
Thomas A. Rowe (Microsoft MVP - FrontPage)
WEBMASTER Resources(tm)

FrontPage Resources, WebCircle, MS KB Quick Links, etc.
==============================================

 

[Kathleen Anderson [MVP - FP]]

Clinton:
I think you should try this for yourself so you can see how it really works.

--
~ Kathleen Anderson
Microsoft MVP - FrontPage
Spider Web Woman Designs
http://www.spiderwebwoman.com/resources/