Re: Pop-up Prevention

[Gary Flynn <flynngn () JMU EDU>]

Gibbs, Aaron M. wrote:

> I'd be interested if anyone has noticed/encountered any security flaws with Firefox.

I sent the Mozilla group a message asking about the
appropriateness of the Mozilla application suite
versus Firefox for sensitive applications last month.
Their response is below. This leads me to think of
Firefox and Mozilla the way I think of Fedora and
RedHat Enterprise. However, I don't think I'd get
many general purpose vendors today, except perhaps
the "unbreakable Oracle", to say they're ready for
security applications. :)


Date: Wed, 23 Jun 2004 10:29:57 +1000
From: Simon Males <sime () anticd org>
User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.0.0)
To: Gary Flynn <flynngn () jmu edu>
CC: partners () mozilla org
Subject: Re: Production Use of Firefox/Thunderbird

Hello Gary

       Thanks for your mail. The current releases of Firefox and Thunderbird
are recommened for testing purposes only, thus not commercial and/or
production uses.

In regards to the suite, it will be continued to be supported mainly for
organisations who rely on tight intergration of internet applications.

--
Simon Males <sime () anticd org>
No More AOL CDs Australia - www.anticd.org


Gary Flynn wrote:
> Hi,
>
> We're contemplating making a recommendation to our population
> to move off Internet Explorer to a Mozilla product due to the
> bimonthly IE security defects.
>
> Our first set of users to move will be those handling sensitive
> information. Therefore, security is the prime decision point
> rather than speed or features.
>
> It is unclear to me from your roadmap, milestones, and version
> numbers how ready Firefox and Thunderbird are for production
> use by users handling sensitive data.
>
> Would you recommend waiting until at least version 1.0 of
> those applications for that type of user and stick to the
> app suite for now?
>
> Thank you for any clarification you can offer,



--
Gary Flynn
Security Engineer
James Madison University

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.