* Thomas Themel <[EMAIL PROTECTED]> [070310 16:56]:
> Hi,
> 
> as Dani??l states, it would be nice if websec behaved like a proper web
> robot. Baruch, are you aware that the change is basically a two-liner?

I'm not even sure that it should go for robots.txt, the idea of websec
is that it behaves more like a browser, it doesn't crawl the website, it
doesn't try to go anywhere it's not directly instructed to and if a user
insists on misbehaving the server has nothing to do for it, or do you
expect a browser to prevent a user from reloading a page every second?

> The only design issue is that a robot UA requires a 'from' email address
> and I'm not quite sure how to supply that. I'd use the destination
> address(es) for the reports, but that's probably not a good idea with
> respect to privacy. What do you think?

That won't be acceptable at all. If I will do that it will be with a
fake email address and a configuration item to change it. An upgrade to
the new version should never expose the users email to other parties.

Baruch


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to