From: Curt Hibbs <curt@...>
Date: 2002-01-08T00:33:27+09:00
Subject: Re: snippet exchange (was: Re:  Re:   chomp for arrays?)

> From: Mark Hahn [mailto:mchahn@facelink.com]
> Sent: Sunday, January 06, 2002 8:28 PM
>
> I don't understand.   I seriously doubt the cia would be
> interested in this
> feature.  From what you describe, every internet-shared facility is
> insecure.  Your argument means no code could ever be disrtributed via the
> net.
>
> I'm not proposing that this would be forced on anyone.  I'm just
> suggesting
> it for people like me.

I think doing this is just fine as long as the user has the option to
approve/deny prior to download and/or installation. You popup a dialog box
(or text console equivalent) explaining what is about to be done and asking
if its ok to proceed. Then user should also get the be able to say "yes to
all future requests" if the really don't care, "yes to all future requests
from this site" (or maybe from "this author").

This is kind of what Microsoft's Internet Explorer does for downloading
ActiveX controls. You are asked if its ok to install the control, but you
are also given then option to "trust all downloads from the same author". I
don't do this myself, but I'm sure a lot of people do.

Curt