Re: Secured photo rendering

2010-03-10 Thread János Löbb
On Mar 9, 2010, at 9:35 AM, David kerber wrote: Caldarale, Charles R wrote: From: André Warnier [mailto:a...@ice-sa.com] Subject: Re: Secured photo rendering But it should not, if the server sends the image with the appropriate no caching and/or expires HTTP headers. The headers don't

Re: Secured photo rendering

2010-03-10 Thread Peter Crowther
On 10 March 2010 15:30, János Löbb janos.l...@yale.edu wrote: When I use the DVD Player from Apple, I cannot take a screenshot even if I click myself to the Finder first. So there is something already in practice that prevents from taking a screenshot :-) Yes - for an application that runs

Re: Secured photo rendering

2010-03-10 Thread André Warnier
Peter Crowther wrote: On 10 March 2010 15:30, János Löbb janos.l...@yale.edu wrote: When I use the DVD Player from Apple, I cannot take a screenshot even if I click myself to the Finder first. So there is something already in practice that prevents from taking a screenshot :-) Yes - for an

Re: Secured photo rendering

2010-03-10 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Peter, On 3/10/2010 10:37 AM, Peter Crowther wrote: On 10 March 2010 15:30, János Löbb janos.l...@yale.edu wrote: When I use the DVD Player from Apple, I cannot take a screenshot even if I click myself to the Finder first. So there is something

Re: Secured photo rendering

2010-03-10 Thread Hassan Schroeder
On Wed, Mar 10, 2010 at 7:46 AM, Christopher Schultz ch...@christopherschultz.net wrote: Just for the sake of mental mast... er, fun! you could write a javascript event handler that ... ..would work until the user switched off JavaScript? or kicked off `wget` with the image URL? :-) --

RE: Secured photo rendering

2010-03-10 Thread Joseph Morgan
On Wed, Mar 10, 2010 at 7:46 AM, Christopher Schultz ch...@christopherschultz.net wrote: Just for the sake of mental mast... er, fun! you could write a javascript event handler that ... ..would work until the user switched off JavaScript? or kicked off `wget` with the image URL? :-) ... or

Re: Secured photo rendering

2010-03-10 Thread André Warnier
Christopher Schultz wrote: ... Just for the sake of mental mast... er, fun! you could write a javascript event handler that watched for un-focus events for the page (which would likely happen if you were using an external utility to take a screenshot) Actually it doesn't. On my PC, I use

Re: Secured photo rendering

2010-03-09 Thread André Warnier
David kerber wrote: Caldarale, Charles R wrote: From: André Warnier [mailto:a...@ice-sa.com] Subject: Re: Secured photo rendering But it should not, if the server sends the image with the appropriate no caching and/or expires HTTP headers. The headers don't matter, since the client has

RE: Secured photo rendering

2010-03-09 Thread Joseph Morgan
Joseph Morgan wrote: I think the OP is asking how to prevent an image from being cached by a client and, I cannot imagine there is a way if the image is to display in a client at all, the image is now there, and the client can do anything it wants... But it should not, if the server sends

RE: Secured photo rendering

2010-03-09 Thread Joseph Morgan
being cached, right? -Original Message- From: Martin Gainty [mailto:mgai...@hotmail.com] Sent: Monday, March 08, 2010 9:11 PM To: Tomcat Users List Subject: RE: Secured photo rendering the easiest implementation would be develop a security fence for your front end (https with secure

RE: Secured photo rendering

2010-03-09 Thread Caldarale, Charles R
From: André Warnier [mailto:a...@ice-sa.com] Subject: Re: Secured photo rendering But it should not, if the server sends the image with the appropriate no caching and/or expires HTTP headers. The headers don't matter, since the client has the image in hand. Browsers, for example, allow

Re: Secured photo rendering

2010-03-09 Thread David kerber
Caldarale, Charles R wrote: From: André Warnier [mailto:a...@ice-sa.com] Subject: Re: Secured photo rendering But it should not, if the server sends the image with the appropriate no caching and/or expires HTTP headers. The headers don't matter, since the client has the image in hand

RE: Secured photo rendering

2010-03-09 Thread Joseph Morgan
Everyone is right... but... I think the OP has to better describe the need at hand. -Original Message- From: David kerber [mailto:dcker...@verizon.net] Sent: Tuesday, March 09, 2010 8:35 AM To: Tomcat Users List Subject: Re: Secured photo rendering Caldarale, Charles R wrote: From

Re: Secured photo rendering

2010-03-09 Thread André Warnier
Joseph Morgan wrote: I think the OP is asking how to prevent an image from being cached by a client and, I cannot imagine there is a way if the image is to display in a client at all, the image is now there, and the client can do anything it wants... But it should not, if the server

RE: Secured photo rendering

2010-03-08 Thread Martin Gainty
the easiest implementation would be develop a security fence for your front end (https with secure connnector) http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html once the request is 'inside' the servlet (or listener or filter) you can reference 'local' folders which contain the necessary