[Previous] [Next] [Index] [Thread]

Undeliverable message



Your message could not be delivered for the following reason:

Mailbox 75162.3375 is currently full.
Please resend your message at a later time.

--- Returned message ---

Sender: owner-www-security@ns2.rutgers.edu
Received: from ns2.rutgers.edu (ns2.rutgers.edu [128.6.21.2]) by dub-img-5.compuserve.com (8.6.10/5.950515)
	id GAA23440; Tue, 23 Jul 1996 06:57:30 -0400
Received: (from daemon@localhost) by ns2.rutgers.edu (8.6.12+bestmx+oldruq+newsunq/8.6.12) id SAA01158 for www-security-outgoing; Mon, 22 Jul 1996 18:46:23 -0400
Received: from hp.com (hp.com [15.255.152.4]) by ns2.rutgers.edu (8.6.12+bestmx+oldruq+newsunq/8.6.12) with ESMTP id SAA01153 for <www-security@ns2.rutgers.edu>; Mon, 22 Jul 1996 18:46:19 -0400
Received: from hpfsvr01.cup.hp.com (allan.cup.hp.com) by hp.com with ESMTP
	(1.37.109.16/15.5+ECS 3.3) id AA165825578; Mon, 22 Jul 1996 15:46:18 -0700
Received: from allan by hpfsvr01.cup.hp.com with SMTP
	(1.37.109.15/15.5+IOS 3.20+cup+OMrelay) id AA079555585; Mon, 22 Jul 1996 15:46:25 -0700
Message-Id: <31F404C0.58FC@cup.hp.com>
Date: Mon, 22 Jul 1996 15:46:24 -0700
From: Gene Ingram <gene@hpfsvr01.cup.hp.com>
Reply-To: www-security@ns2.rutgers.edu
Organization: Hewlett-Packard Co.
X-Mailer: Mozilla 3.0b5a (X11; U; HP-UX A.09.05 9000/720)
Mime-Version: 1.0
To: www-security@ns2.rutgers.edu
Subject: Re: cookie overloading (denial of service)
References: <m0uhCUY-000AGUC@malasada.lava.net>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-www-security@ns2.rutgers.edu
Precedence: bulk
Errors-To: owner-www-security@ns2.rutgers.edu

> With your browser limited to holding 300 cookies, I've pretty much
> forced your browser to discard most or all of the previous cookies
> in favor of mine.

Netscape's going to have to increase their 300 cookie ceiling in 
its next release to accommodate increased demand.  :-)  Is 
memory limitation the reason for limit?  Maybe they should have a 
field to define the cookie limit, something like this:

Memory cache:  3000  Kilobytes
  Disk cache:  5000  Kilobytes
Cookie cache:  3000  Kilobytes

Then if you set Cookie cache to ZERO it will solve the problem.

-- 
___
 | ._  _ ._ _.._ _    ``I do not fear computers
_|_| |(_|| (_|| | |     I fear lack of them.''  -Isaac Asimov
_____  _|  _______________________________________________________
Key fingerprint:  93 E1 15 E6 35 BC B2 84  B2 7B 39 76 29 72 32 72
 [Signature lettering created by ``Figlet Ascii Font Converter''
  http://mediacube.datacom.de/cgi-bin/moniteurs/figlet]