How do I use a proxy?

  • Thread starter Thread starter Nigel Andrews
  • Start date Start date
A security update was made available that modifies the default behavior of
Internet Explorer for handling user information in HTTP and in HTTPS URLs
http://support.microsoft.com/?kbid=834489

If applicable.

Fix, if This problem occurs after you apply the 832894 security update
(MS04-004) or the 821814 hotfix.


http://support.microsoft.com/?kbid=831167
SYMPTOMS
Programs that use Wininet functions to post data (such as a user name or a
password) to a Web server retry the POST request with a blank header if the
Web server closes (or resets) the initial connection request.
--

Henri Leboeuf
Web page: http://www.colba.net/~hlebo49/index.htm
** NOTE NEW ADDRESS **
Pages at generation.net will no longer be updated.
===
 
Can anyone say if there is a way around this

<TITLE>834489 - A security update is available that modifies the default behavior of Internet Explorer for handling user information
in HTTP and in HTTPS URLs</TITLE>
 
Henri,
Thank-you for your reply. I believe that 834489 provides a solution that has
to be coded into the web page being addressed.
Perhaps I didn't explain that I am a user trying to access a web site with
this format. So I don't have access to recoding the web page.
I was hoping there might be a way to remove that element of the security
update in my copy of IE6.

Thank-you for passing the information

Nigel
 
Robert,

As I mentioned to Henri, I am just a user and don't have access to the code
for that web page so I couldn't apply the fix suggested by 834489. I was
hoping that I might be able to remove that element of the security update
from my IE6.

Thanks for you help

Nigel

Robert Aldwinckle said:
<TITLE>834489 - A security update is available that modifies the default
behavior of Internet Explorer for handling user information
 
I am just a user and don't have access to the code for that web page
so I couldn't apply the fix suggested by 834489.

Are you authorized to change your registry?
Did you try the registry procedure at the bottom of the article?

<H3>How to disable the new default behavior for handling user information in HTTP or HTTPS URLs</H3>
 
Robert,

Thank goodness to you for pointing out what I missed!
I will give it a whirl

Many thanks

Nigel
 
I have now set in the Registry entry (I had to create the subkeys under
Main)
But the site I am trying still gives "The page cannot be displayed" and I am
pretty sure it is available.

Could there be something else to do?

Thanks
Nigel
 
Nigel Andrews said:
I have now set in the Registry entry (I had to create the subkeys under
Main)
But the site I am trying still gives "The page cannot be displayed" and I am
pretty sure it is available.

What does it say in the title bar now?

FWIW I don't have the registry switch applied
and I get "Invalid syntax error" from your example
so I would expect at least you should have a different title
to indicate that the switch has been noticed.

Hmm... I just tried your example and found two problems.
Even before the patch the RFC would not have allowed that
colon (:) in the "password" parameter. You would have to encode
it as the equivalent escaped ASCII hex value (%3A).

Secondly and serendipitously, I have discovered that if you are using
a proxy on the client that you would have to add a registry value for
its program name too. Makes sense but it's a bit obscure IMO.
Some users might be aware that they had a proxy program running
because of the checkmark in the Connections dialog but that only
informs them of the port which is to be used.

Here is how an XP user might check if this applies.
1. Find the proxy port number from the Connections dialog
For purpose of example below say that that was 8080.
2. In a command window enter:

netstat -a -o | find "8080" | find /i "LISTENING"

(I.e. enter the actual port number from #1 in place of 8080.)

The -o switch (unique to XP) gives the PID of the listening task
and the PID appears at the end of each line when requested.
For purpose of example below say that that was 555.

3. Plug the listening task PID into the following pipeline in place of 555

for /f "tokens=1,2" %l in ('tasklist') do @if %m==555 echo %l %m

4. The program name of the proxy is the first parameter echoed
after the command line in #3. Add an entry for that program
in the way that 834489 describes.


BTW I used RegMon to notice this. Filter was FeatureControl
So if you have RegMon using that filter during your testing might
be easier than the above procedure. RegMon also makes evident
that for the registry changes to take effect you may need to restart
the program. (It seems to be checked once when the program is
opened.)

Could there be something else to do?

Hopefully the above description will be enough information
for you to solve the problem; otherwise here are some diagnostics
I might try.

Does netstat give you any clues?

netstat -a -n -o

Even better would be to trace the packet flow
using netcap or Ethereal.

Thanks
Nigel


Good luck

Robert
---
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Back
Top