In article <[log in to unmask]>,
Bruce Toback  <[log in to unmask]> wrote:
> Starting with this new version, the default security settings are such
> that when MSIE downloads a file of type .hqx -- roughly the Macintosh
> equivalent to .zip -- the browser automatically decodes the file, and if
> it's a program, starts execution.

Um, unless I'm mistaken, there is no such thing as a file of type ".hqx"
on the Mac. There are files with the *extension* ".hqx", but there is no
default assumption that the extension and the type are related.

It's up to the web browser to assign a type to a file based on the MIME
type, extension, embedded strings in the file, and anything else it can use.

In any case, MIME type should override extension. Wouldn't it be nice to
have a MIME type of "x-mac-creator/XXXX" so you could transfer files from
an OS X webserver to an OS X browser with *exactly* the right type?

You could also have all the other resources transmitted MIME-encoded
in the headers.

X-Mac-Resource: "ICON; VALUE=%...."

That would also let non-mac servers DTRT as well.

If only someone with a clue was writing the servers...

Anyway...

As a matter of policy, a web browser should never execute code without
being explicitly configured to do so.

--
 `-_-'   In hoc signo hack, Peter da Silva.
  'U`    "A well-rounded geek should be able to geek about anything."
                                                       -- [log in to unmask]
         Disclaimer: WWFD?

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *