Re: [DotGNU]Starbucks followup

[Dave Sherohman]

On Fri, Aug 17, 2001 at 06:37:31AM -0700, Bill Lance wrote:
> 3)  Setting Netscape cookie filter to accept only
> cookies from viewed pages is somehow sidesteped.  I
> setup a dummy Passport and Starbucks account.  Both
> starbucks and Passport cookies were placed on the test
> machine.  The passport cookies were passed thru. (This
> may be accomplished via redirection of URL, thus not
> technically a different page.)

No need to bother with redirection.  Just create a DNS entry under
starbucks.com for MS's passport server.  (e.g.,
passport.starbucks.com IN CNAME passport.microsoft.com. - those
aren't the actual names, but the technique should be clear.)  Some
of the banner servers seem to have been using that trick for a while
now...

-- 
With the arrest of Dimitry Sklyarov it has become apparent that it is not
safe for non US software engineers to visit the United States. - Alan Cox
"To prevent unauthorized reading..."         - Adobe eBook reader license