On Fri, 15 May 1998, Chris Dilworth wrote:
> >Yes, but it works with all browsers except AOL (we finally banned them 
> >and their evil proxy servers from accessing the site).
> 
> Would you elaborate on this for me?

This particular site uses cookies to track visitors from page to page.  
In the application at issue, they go through a sequence of about 46 pages 
and complete a bunch of fields.  When they submit, the data is kicked 
into an Oracle table, tracked by username.

The AOL proxies have no respect for any of the NO-Cache tag options.  
What we found happening is that our pages would get into their monolithic 
proxy cash and sit there for days.  however, the accompanying cookies 
expired in 3 days.  So, the first person to reqeust a page from the 
application at 72 hours and 1 second after a previous visitor retrieved 
it would get it back with the other person's data--the proxy server would 
send it by default rather than retrieving a new original.

You get really, really nasty calls to tech support when people's credit 
card numbers get mixed up.

After repeated calls to AOL to ask them to simply turn off caching for 
our domain (no useful results), and a weak attempt to keep up with the 
changes in the darn-near-daily browser updates, we resorted to their 
document collection and help files.  They suck.  If you read carefully, 
they claim their entire cache system is proprietary, so they can't tell 
you how it works.  They do tell you they use special standards, which is 
why you can't prevent caching.  They also, in some instances, strip off 
everything after the ? in URL encoded strings, so we couldn't use those 
to genereate random numbers on each page (we thought maybe by doing that, 
at 20000 visitors a day with 46 pages each, our 86K individual pages in 
their cache daily might eventually annoy them . . .).

In short, AOL makes it darn hard to effectively deliver any type of 
dynamic, time-sensitive data to their users.  They're basically caching 
every page that comes in on disk and saving it, and adding some apparent 
shortcuts to cut down on what they perceive as "unnecessary" traffic to 
the Internet.

Similarly, we do a lot of updating of files where we keep the original 
file name.  The updates are data some customers require, and they know, 
for instance, that some data goes in Monday morning.  So on Monday 
morning they're there looking for it.  Because we use the same filename 
(so they can bookmark it), we also encounter a bunch of misconfigured 
proxies from AOL that ignore the last modified info and feed them an old 
copy--no matter how many times they reload.  Get them off an AOL 
connection, the data is there for them.

Thus, since they wouldn't tell us how to get around this, we found them too 
much of a pain to serve, and most of the 
people using our system could get to another non-AOL connection, we just 
looked up the IP numbers of every AOL proxy we could find, filtered the 
whole Class B block, then screened them for AOL proxy server names--and 
if they matched, they get a page saying "sorry" and giving them 
instructions on how to use the application from a real internet connection.

Enough generic elaboration, or was there something specific in there you 
wanted more on?  Basically, AOL is only a fraction less evil than MS in 
my book  :P

B
____________________________________________________________________
--------------------------------------------------------------------
 Join The Web Consultants Association :  Register on our web site Now
Web Consultants Web Site : http://just4u.com/webconsultants
If you lose the instructions All subscription/unsubscribing can be done
directly from our website for all our lists.
---------------------------------------------------------------------

Reply via email to