security.web-applications (thread)

HTTPS Question, Bob Lee
Metis 1.4.1 released, Sacha Faust
Manipulating Microsoft SQL Server Using SQL Injection, Aaron C. Newman
- Re: Manipulating Microsoft SQL Server Using SQL Injection (+ DNS Tunnels), Haroon Meer
Access Management Products, James Dawson
- Re: Access Management Products, Alberto Cozer
- Re: Access Management Products, Cyrill Osterwalder
- Re: Access Management Products, Frank DeGilio
Some questions regarding IIS, Certs and Security practices, Gal . Rozov
WG: On sessions (rather long), freddie . soerensen
A new approach toward teaching secure coding? (WWW or otherwise), Alex Lambert
- Re: A new approach toward teaching secure coding? (WWW or otherwise), Mark Curphey
- Re: A new approach toward teaching secure coding? (WWW or otherwise), Sverre H. Huseby
  - Re: A new approach toward teaching secure coding? (WWW or otherwise), Alex Lambert
  - RE: A new approach toward teaching secure coding? (WWW or otherwise), Jason Coombs
On sessions (rather long), Sverre H. Huseby
- RE: On sessions (rather long), Jason Coombs
  - Re: On sessions (rather long), Sverre H. Huseby
  - Re: On sessions (rather long), Kevin Spett
  - Re: On sessions (rather long), Alex Russell
    - RE: On sessions (rather long), Jason Coombs
    - Re: On sessions (rather long), Alex Russell
    - RE: On sessions (rather long), Jason Coombs
    - Re: On sessions (rather long), Alex Russell
    - Re: On sessions (rather long), Bob Lee
    - Re: On sessions (rather long), Alex Russell
    - RE: On sessions (rather long), Jason Coombs
Security Practices for MS architecture, Gal . Rozov
- RE: Security Practices for MS architecture, Christopher Todd
Encryption approach to secure web applications, Mario Torre
- Re: Encryption approach to secure web applications, Allan Wind
- Re: Encryption approach to secure web applications, zeno
- Re: Encryption approach to secure web applications, Jeff Williams @ Aspect
  - Re: Encryption approach to secure web applications, Alex Russell
    - Re: Encryption approach to secure web applications, Kevin Spett
    - Re: Encryption approach to secure web applications, Alex Russell
    - Re: Encryption approach to secure web applications, Jeff Williams @ Aspect
    - Re: Encryption approach to secure web applications, Alex Russell
    - Re: Encryption approach to secure web applications, Jeff Williams @ Aspect
    - Re: Encryption approach to secure web applications, Alex Russell
    - Re: Encryption approach to secure web applications, Jason
- Re: Encryption approach to secure web applications, Kevin Spett
Metis 1.4 released, Sacha Faust
Interesting scan, zeno
- Re: Interesting scan, sunzi
- Re: Interesting scan, zeno
Warning: PHP 4.2 may put session ids in URLs, Sverre H. Huseby
- Re: Warning: PHP 4.2 may put session ids in URLs, Kevin Spett
  - Re: Warning: PHP 4.2 may put session ids in URLs, Sverre H. Huseby
    - RE: Warning: PHP 4.2 may put session ids in URLs, Peter Petermann
- RE: Warning: PHP 4.2 may put session ids in URLs, Peter Petermann
  - Re: Warning: PHP 4.2 may put session ids in URLs, Sverre H. Huseby
    - RE: Warning: PHP 4.2 may put session ids in URLs, Peter Petermann
    - Re: Warning: PHP 4.2 may put session ids in URLs, Sverre H. Huseby
    - RE: Warning: PHP 4.2 may put session ids in URLs, Peter Petermann
    - Re: Warning: PHP 4.2 may put session ids in URLs, Alex Lambert
    - Re: Warning: PHP 4.2 may put session ids in URLs, Merlin, The Mage
    - Re: Warning: PHP 4.2 may put session ids in URLs, Alex Russell
    - RE: Warning: PHP 4.2 may put session ids in URLs, Nik Cubrilovic
    - Re: Warning: PHP 4.2 may put session ids in URLs, Jason
    - Re: Warning: PHP 4.2 may put session ids in URLs, Jonas Anden
    - Securing sessions [was: Warning: PHP 4.2 may put session ids in URLs], Keith Smith
    - Re: Securing sessions [was: Warning: PHP 4.2 may put session ids in URLs], Jonas Anden
    - Re: Securing sessions [was: Warning: PHP 4.2 may put session ids in URLs], Alex Russell
    - Re: Securing sessions [was: Warning: PHP 4.2 may put session ids in URLs], Sverre H. Huseby
    - RE: Securing sessions [was: Warning: PHP 4.2 may put session ids in URLs], Keith Smith
    - Re: Securing sessions [was: Warning: PHP 4.2 may put session ids in URLs], Sverre H. Huseby
    - Re: Securing sessions [was: Warning: PHP 4.2 may put session ids in URLs], Alex Russell
    - Re: Securing sessions [was: Warning: PHP 4.2 may put session ids in URLs], Sverre H. Huseby
    - RE: Securing sessions [was: Warning: PHP 4.2 may put session ids in URLs], Stig Jorgensen
    - RE: Securing sessions [was: Warning: PHP 4.2 may put session ids in URLs], Jason Coombs
    - Re: Warning: PHP 4.2 may put session ids in URLs, Alex Russell
    - RE: Warning: PHP 4.2 may put session ids in URLs, Jason Coombs
    - Re: Warning: PHP 4.2 may put session ids in URLs, Alex Russell
    - Re: Warning: PHP 4.2 may put session ids in URLs, Steve Mcilwain
    - Re: Warning: PHP 4.2 may put session ids in URLs, Alex Russell
    - Re: Warning: PHP 4.2 may put session ids in URLs, Sverre H. Huseby
    - Re: Warning: PHP 4.2 may put session ids in URLs, Jonas Anden
    - Re: Warning: PHP 4.2 may put session ids in URLs, Sverre H. Huseby
- Re: Warning: PHP 4.2 may put session ids in URLs,
  - Re: Warning: PHP 4.2 may put session ids in URLs, Sverre H. Huseby
    - Re: Warning: PHP 4.2 may put session ids in URLs, Craig Davison
    - Re: Warning: PHP 4.2 may put session ids in URLs, Sverre H. Huseby
    - Re: Warning: PHP 4.2 may put session ids in URLs, Sverre H. Huseby
- RE: Warning: PHP 4.2 may put session ids in URLs, David Endler
  - RE: Warning: PHP 4.2 may put session ids in URLs, Peter Petermann
- RE: Warning: PHP 4.2 may put session ids in URLs, Andrew Blyler
  - RE: Warning: PHP 4.2 may put session ids in URLs, Liam Quinn
  - Re: Warning: PHP 4.2 may put session ids in URLs, Alex Russell
- RE: Warning: PHP 4.2 may put session ids in URLs, Ogle Ron (Rennes)
  - BASIC authentication vs. sessions ID [was: Warning: PHP 4.2 may put session ids in URLs], Keith Smith
RE: asymmetric crypto for storage of cc#s, and separation of resp onsibilities, Filip Van Laenen
Re: asymmetric crypto for storage of cc#s, and separation of responsibilities, Alex Russell
- RE: asymmetric crypto for storage of cc#s, and separation of responsibilities, Andrew van der Stock
Secure Flag on Session ID Cookies (Was RE: XSS when a session ID is required), David Wong
Mozilla and MSIE handle Referer over HTTPS differently, Sverre H. Huseby
- RE: Mozilla and MSIE handle Referer over HTTPS differently, Lars Troen
XSS when a session ID is required, stephen
- Re: XSS when a session ID is required, Jason
  - Re: XSS when a session ID is required, stephen
    - Re: XSS when a session ID is required, Jason
    - Re: XSS when a session ID is required, stephen
  - Re: XSS when a session ID is required, billp
- Re: XSS when a session ID is required, Kevin Spett
  - Re: XSS when a session ID is required, stephen
Slow list moderation for next few weeks, Mark Curphey
- Re: Slow list moderation for next few weeks, Alex Russell
  - asymmetric crypto for storage of cc#s, and separation of responsibilities, Ben Mord
    - Re: asymmetric crypto for storage of cc#s, and separation of responsibilities, Alex Russell
    - RE: asymmetric crypto for storage of cc#s, and separation of responsibilities, Ben Mord
    - Re: asymmetric crypto for storage of cc#s, and separation of responsibilities, Alex Russell
    - Re: asymmetric crypto for storage of cc#s, and separation of responsibilities, Alex Russell
Credit Card Validation, Mars T
- Re: Credit Card Validation, Alex Russell
- RE: Credit Card Validation, Tony Welsh
Two problems., Ivan Hernandez
- Re: Two problems., alex
  - RE: Two problems., Joe Durbin
    - Re: Two problems., dwarkeeper
  - Re: Two problems., Wm. G. Urquhart
  - Re: Two problems., Qubit
- Re: Two problems., Marcel Erkens
- Re: Two problems., David Garnier
  - Re: Two problems., Darren Davison
  - Re: Two problems., Alex Russell
- Re: Two problems., George W. Capehart
  - Re: Two problems., Matthew Hannigan
- Re: Two problems., cathal connolly
- Re: Two problems., Ivan Hernandez
  - Re: Two problems., Nick Jacobsen
- RE: Two problems., Harbar, Spencer
- RE: Two problems., Patrick Johanneson
  - Re: Two problems., Ken Schaefer
- Re: Two problems.,
SSL vulnerability in IE and KDE's Konqueror, Christopher Todd
- Re: SSL vulnerability in IE and KDE's Konqueror, Mathieu Gervais
  - RE: SSL vulnerability in IE and KDE's Konqueror, Jason Coombs
    - Re: SSL vulnerability in IE and KDE's Konqueror, Peter Conrad
New Perl XSS audit tool, Matt Sergeant
Entrust vs. Verisign certs, Woodworth, Lora
- RE: Entrust vs. Verisign certs, Cushing, David
  - Re: Entrust vs. Verisign certs, Ajai Khattri
- Re: Entrust vs. Verisign certs, Alex Russell
- RE: Entrust vs. Verisign certs, Lars Troen
- RE: Entrust vs. Verisign certs, Bruce . Morris
- RE: Entrust vs. Verisign certs, Alberto Cozer
  - Re: Entrust vs. Verisign certs, Jason
    - Re: Entrust vs. Verisign certs, Kurt Seifried
    - Re: Entrust vs. Verisign certs, Jason
    - Re: Entrust vs. Verisign certs, Kurt Seifried
    - Re: Entrust vs. Verisign certs, Jason
    - Re: Entrust vs. Verisign certs, Kurt Seifried
    - Re: Entrust vs. Verisign certs, Jason
    - Re: Entrust vs. Verisign certs, Nelson Sampaio Araujo Junior
  - RE: Entrust vs. Verisign certs, Steven J. Sobol
- RE: Entrust vs. Verisign certs, Mike Shaw
Q about PHP and ASP includes, Gatis Mednis
- Re: Q about PHP and ASP includes, sunzi
- Re: Q about PHP and ASP includes, Kevin Spett
RE: SQL Injections and JDBC, Michael Howard
- Re: SQL Injections and JDBC, Jeff Williams
- RE: SQL Injections and JDBC, Nick Lothian
  - RE: SQL Injections and JDBC, Herry
    - RE: SQL Injections and JDBC, moksha faced
    - RE: SQL Injections and JDBC, Herry Koh
- RE: SQL Injections and JDBC, Nick Lothian
- RE: SQL Injections and JDBC, Vitor Ventura
- RE: SQL Injections and JDBC, Breidenbach, Beth
Client IP - from client or server?, Mike Shaw
- Re: Client IP - from client or server?, Kevin Spett
- Re: Client IP - from client or server?, Alex Russell
  - Re: Client IP - from client or server?, Steven J. Sobol
- Re: Client IP - from client or server?, Panayiotis A. Thermos
  - Re: Client IP - from client or server?, Kevin Spett
    - Re: Client IP - from client or server?, Alex Russell
- Re: Client IP - from client or server?, Panayiotis A. Thermos
  - Re: Client IP - from client or server?, Kevin Spett
- Re: Client IP - from client or server?, Mike Shaw
- Re: Client IP - from client or server?, Panayiotis A. Thermos
  - Re: Client IP - from client or server?, Kevin Spett
- Re: Client IP - from client or server?, Panayiotis A. Thermos
- RE: Client IP - from client or server?, Vitor Ventura
  - RE: Client IP - from client or server?, Nik Cubrilovic
    - Re: Client IP - from client or server?, Bill Pennington
SiteMinder Siebel Integration, Kevin Wharram
Easy End to XSS, Doug Sibley
- Re: Easy End to XSS, Mark Curphey
  - Re: Easy End to XSS, Andrew Jaquith
- Re: Easy End to XSS, Bob Lee
  - HTTP & SSL Sessions, Bob Lee
    - Re: HTTP & SSL Sessions, Bob Lee
    - Re: HTTP & SSL Sessions, Kevin Spett
    - Re: HTTP & SSL Sessions, Nik Cubrilovic
    - Re: HTTP & SSL Sessions, Kevin Spett
- SQL Injections and JDBC, Bob Lee
  - Re: SQL Injections and JDBC, M Ponkumar Venkatesh
    - Re: SQL Injections and JDBC, Bob Lee
    - Re: SQL Injections and JDBC, Chip Andrews
    - Re: SQL Injections and JDBC, Kevin Spett
  - Re: SQL Injections and JDBC, Kevin Spett
  - RE: SQL Injections and JDBC, Ben Mord
    - Re: SQL Injections and JDBC, Kevin Spett
    - Re: SQL Injections and JDBC, Jeff Williams
    - Re: SQL Injections and JDBC, Ben Mord
    - Re: SQL Injections and JDBC, Jeff Williams
    - Re: SQL Injections and JDBC, Chip Andrews
- RE: Easy End to XSS, Ben Mord
  - Re: Easy End to XSS, Alex Russell
    - RE: Easy End to XSS, Ben Mord
    - Re: Easy End to XSS, Alex Russell
    - Re: Easy End to XSS, Ben Mord
    - Re: Easy End to XSS, Bob Lee
    - Re: Easy End to XSS, Ben Mord
    - Re: Easy End to XSS, Marc Slemko
    - RE: Easy End to XSS, Ben Mord
    - Re: Easy End to XSS, Bob Lee
    - Re: Easy End to XSS, Alex Russell
  - Re: Easy End to XSS, Bill Pennington
    - Re: Easy End to XSS, Steven J. Sobol
    - Re: Easy End to XSS, Bill Pennington
    - Re: Easy End to XSS, Steven J. Sobol
    - Re: Easy End to XSS, Sverre H. Huseby
    - Re: Easy End to XSS, Bill Pennington
- Re: Easy End to XSS, Greg Steuck
- Re: Easy End to XSS, Daniel Delaney
- Re: Easy End to XSS, Doug Sibley
- Re: Easy End to XSS, Doug Sibley
Re: Cross Site Scripting Vulnerabilities - XSS, Bill Pennington
- Re: Cross Site Scripting Vulnerabilities - XSS, Dave Aitel
- Re: Cross Site Scripting Vulnerabilities - XSS, stephen
OWASP Update, Mark Curphey
SPIKE 2.5 and associated vulns, Dave Aitel
Re: Paper on Web Application Security, Patrice Neff
Apache Security Training - SANS Institute, Ryan Barnett