[thelist] Netscape 6+ insecure?

[Chris Kaminski]

Yesterday I tried to do some online banking with Mozilla and failed because
CapitalOne redirects Moz to an 'unsupported browser' page claiming Netscape
6+ has 'security issues.' Someone on another list helpfully pointed out that
auto-fill of passwords could not be disabled from the server in early
versions of NS6, and that might be the problem. That doesn't look to be the
case.

I sent them a complaint and they responded in pertinent part:

    We regret any inconvenience you may have experienced
    from our web site not supporting Netscape 6.0 or greater.
    Currently, our website is compatible with only Netscape
    Version 4.76 or Internet Explorer 5.5 or greater because
    other browser versions are not able to consistently encrypt
    and decode the information displayed on the secured pages
    of our website.


Anyone ever hear of such a thing?

Sounds like malarkey to me, as Moz has no trouble with Citi Group's banking
site, nor with PostBank's, nor have we had any trouble with the two SSL
sites we've worked on.

Oh, and this is another reason why some folks still use NN4.x: it's the only
non-MS browser some large sites support. It's partly our own colleagues'
fault that browser is still with us, apparently.

Feh.


chris.kaminski == ( design | code | analysis )

------------------------------------------------------------
    Any sufficiently advanced technology is
    indistinguishable from magic.
    ----------------------------------<< Arthur C. Clarke >>