<html><head><meta http-equiv="Content-Type" content="text/html charset=iso-8859-1"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">So a an appropriate warning in a <noscript> region on the login page would be simple and efficient.<br><div>
<br class="Apple-interchange-newline"><span style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; display: inline !important; float: none; ">Beste Grüsse,</span><br style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><a href="http://me.uni.kn/marcel.waldvogel" style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">-Marcel Waldvogel</a>
</div>
<br><div><div>Am 25.11.2012 um 23:22 schrieb Michael <<a href="mailto:mike@draftx.net">mike@draftx.net</a>>:</div><br class="Apple-interchange-newline"><blockquote type="cite">While I agree that Javascript and cookies should be required, it should not silently fail if a person doesn't have either of them enabled. Some kind of error is always appreciated here.<br>Mike<br><br><div class="gmail_quote">
On Sun, Nov 25, 2012 at 4:13 PM, Simon Brereton <span dir="ltr"><<a href="mailto:simon.buongiorno@gmail.com" target="_blank">simon.buongiorno@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p>Yes - for this one site. Which I'd trust. But short of using owncloud in a separate browser I'm forced to accept ask session cookies just to accommodate the few I can trust.</p><p>Ditto the Javascript.</p><span class="HOEnZb"><font color="#888888"><p>Simon<br></p></font></span><div class="HOEnZb"><div class="h5"><p>On Nov 25, 2012 4:46 PM, "Frank Karlitschek" <<a href="mailto:frank@owncloud.org" target="_blank">frank@owncloud.org</a>> wrote:<br>
><br>
><br>
> On 25.11.2012, at 22:24, Simon Brereton <<a href="mailto:simon.buongiorno@gmail.com" target="_blank">simon.buongiorno@gmail.com</a>> wrote:<br>
><br>
> > Do you have a link for that assertion?<br>
> ><br>
> > <a href="http://arstechnica.com/security/2012/10/firefox-16-vulnerability-attack-code-available-online/" target="_blank">http://arstechnica.com/security/2012/10/firefox-16-vulnerability-attack-code-available-online/</a><br>
> ><br>
> > It would seem to me that Javascript is still an issue.<br>
><br>
> That was a Firefox bug that is already fixed.<br>
><br>
><br>
> > Cookies may not present a security issue, but a privacy one, and unless you're prepared to undergo a lot of effort allowing them on a per-site basis is a lot of work most people baulk at.<br>
><br>
> ownCloud is using only session cookies that are automatically removed when you close your browser and they are only send to ownCloud server. No privacy problem here.<br>
><br>
> Frank<br>
><br>
><br>
> > The more software on the internet works without cookies and without Javascript the safer the world is in general.<br>
> ><br>
> > Simon<br>
> ><br>
> > On Nov 25, 2012 12:11 PM, "Frank Karlitschek" <<a href="mailto:frank@owncloud.org" target="_blank">frank@owncloud.org</a>> wrote:<br>
> > ><br>
> > > Hi Mikko,<br>
> > ><br>
> > > thanks for thew bug report.<br>
> > > Unfortunately we don´t plan to support browsers without support for cookies and javascript at the moment.<br>
> > > This would restrict our possibilities in the web interface significantly and would lead to a second completely different interface.<br>
> > ><br>
> > > (Session)-Cookies and javascript aren´t considered harmful or insecure nowadays. Most security people even think that having the session ID in the url is less secure than in a session cookie.<br>
> > ><br>
> > > Why do you think this is a problem?<br>
> > ><br>
> > > The problem with ogg files is a known limitation at the moment. I hope someone improves this in the future.<br>
> > ><br>
> > ><br>
> > > Frank<br>
> > ><br>
> > ><br>
> > ><br>
> > > On 25.11.2012, at 17:23, Mikko V. Viinamäki <<a href="mailto:Mikko.Viinamaki@students.turkuamk.fi" target="_blank">Mikko.Viinamaki@students.turkuamk.fi</a>> wrote:<br>
> > ><br>
> > > > Hi!<br>
> > > ><br>
> > > > Since I don't have a github account... I noticed the web interface fails silently in case you don't allow cookies and same if you don't allow JavaScript. Also, this .ogg file was not added onto the music tab in the interface <a href="http://commons.wikimedia.org/wiki/File:BedBugs%26SaltyDog.ogg" target="_blank">http://commons.wikimedia.org/wiki/File:BedBugs%26SaltyDog.ogg</a> I wonder why?<br>
> > > ><br>
> > > > Besides that, owncloud's looking pretty slick!<br>
> > > ><br>
> > > > Mikko<br>
> > > > _______________________________________________<br>
> > > > Owncloud mailing list<br>
> > > > <a href="mailto:Owncloud@kde.org" target="_blank">Owncloud@kde.org</a><br>
> > > > <a href="https://mail.kde.org/mailman/listinfo/owncloud" target="_blank">https://mail.kde.org/mailman/listinfo/owncloud</a><br>
> > ><br>
> > > _______________________________________________<br>
> > > Owncloud mailing list<br>
> > > <a href="mailto:Owncloud@kde.org" target="_blank">Owncloud@kde.org</a><br>
> > > <a href="https://mail.kde.org/mailman/listinfo/owncloud" target="_blank">https://mail.kde.org/mailman/listinfo/owncloud</a><br>
><br>
</p>
</div></div><br>_______________________________________________<br>
Owncloud mailing list<br>
<a href="mailto:Owncloud@kde.org">Owncloud@kde.org</a><br>
<a href="https://mail.kde.org/mailman/listinfo/owncloud" target="_blank">https://mail.kde.org/mailman/listinfo/owncloud</a><br>
<br></blockquote></div><br>
_______________________________________________<br>Owncloud mailing list<br><a href="mailto:Owncloud@kde.org">Owncloud@kde.org</a><br>https://mail.kde.org/mailman/listinfo/owncloud<br></blockquote></div><br></body></html>