Comments on: Update to Single-Site-Browsers (SSBs) http://isisblogs.poly.edu/2008/04/28/update-to-single-site-browsers-ssbs/ Information Systems and Internet Security Thu, 28 Aug 2008 09:06:55 +0000 http://wordpress.org/?v=2.6.1 By: Dan Guido http://isisblogs.poly.edu/2008/04/28/update-to-single-site-browsers-ssbs/#comment-323 Dan Guido Tue, 29 Apr 2008 04:36:10 +0000 http://isisblogs.poly.edu/?p=86#comment-323 It doesn't make sense for a malicious user to voluntarily use an SSB, as it offers restricted functionality when compared to a normal web browser or an HTTP proxy. They have nothing to gain and it opens no additional attack vectors. SSBs are for preventing naive users from shooting themselves in the foot. Unless the organization sponsoring their use takes it a few steps further, into a NAC-like realm, are they doing anything to secure the server-side of the transaction. It doesn’t make sense for a malicious user to voluntarily use an SSB, as it offers restricted functionality when compared to a normal web browser or an HTTP proxy. They have nothing to gain and it opens no additional attack vectors.

SSBs are for preventing naive users from shooting themselves in the foot. Unless the organization sponsoring their use takes it a few steps further, into a NAC-like realm, are they doing anything to secure the server-side of the transaction.

]]> By: Kurt http://isisblogs.poly.edu/2008/04/28/update-to-single-site-browsers-ssbs/#comment-321 Kurt Tue, 29 Apr 2008 04:27:55 +0000 http://isisblogs.poly.edu/?p=86#comment-321 Dan, I think that the assumptions should be stated. If my understanding is correct, you are assuming that the user is naive but not hostile, the client computer is not owned, and the browser works correctly. Are there other assumptions involved in the SSB idea? -kurt Dan,

I think that the assumptions should be stated. If my understanding is correct, you are assuming that the user is naive but not hostile, the client computer is not owned, and the browser works correctly. Are there other assumptions involved in the SSB idea? -kurt

]]>