Shostack + Friends Blog Archive


Is Disabling Javascript a Win?

(Dave asked in a comment.) Yes, disabling Javascript is a win. Here’s an IE issue, and here’s one for Mozilla.
Now, using Javascript, when its on, to reduce the number of clicks a user needs to make is a fine thing. I’m in favor of it. (Although I often find myself in misselect hell, when it works, its nice.) However, Microsoft is very publicly trying to take a leading position in security. And in many ways, they’re doing so. They have a lot of smart people implementing pretty clear decrees from the top.
That page could easily have been done in a way to exemplify secure and easy to use web design by adding a “Go” button next to the drop-menus.