Browser Plugin Check

[Gary Flynn <flynngn () JMU EDU>]

Mozilla has put up a web site to check plugin versions on
Mozilla based browsers.

What would be nice is to have a site that is vendor agnostic
driven from a library of plugin/activex/extension version
checking scripts vetted and hosted on a trusted party's web
site. US-CERT? Educause? OWASP?

It would also be nice to be able to import those checks on
local sites so that a site could choose to warn visitors
of particularly risky code or refuse access to vulnerable,
unmaintained clients as policy dictates.

Sort of a WebNAC.

Workable idea?

<https://www-trunk.stage.mozilla.com/en-US/plugincheck/>

--
Gary Flynn
Security Engineer
James Madison University