RE: 'masking' or 'hiding' am ip address from a web browser

From: Hagen, Eric (ehagen_at_DenverNewspaperAgency.com)
Date: 10/24/03

  • Next message: Steve: "Re: A reminder that security is not inherently solvable with technology"
    To: Bryan Sultanik <Bryan.Sultanik@tdh.state.tx.us>, "'security-basics@securityfocus.com'" <security-basics@securityfocus.com>
    Date: Fri, 24 Oct 2003 12:55:33 -0600
    
    

    The browser shows whatever site it thinks it's viewing. So... if your
    server is only accessable by and IP, then that's what the browser will show.
    There is a "stupid browser trick" where you can put a framset HTML page out
    on a DNS-supported server somewhere and then make a single full screen frame
    that contains your app. in this way, only the URL of the frameset HTML is
    displayed, even though you are viewing a page on your local page.

    This can be misleading to the user because it conceals all of the
    command-line arguments and other things... no matter what you do in your
    app, the URL bar will always show "http://www.mysite.com/myapp/" which is
    where the frameset is hosted, even if the contents of the screen change or
    link off-site (of course, unless your app uses "target=_TOP" in it's
    external links).

    Eric

    -----Original Message-----
    From: Bryan Sultanik [mailto:Bryan.Sultanik@tdh.state.tx.us]
    Sent: Friday, October 24, 2003 6:49 AM
    To: 'security-basics@securityfocus.com'
    Subject: 'masking' or 'hiding' am ip address from a web browser

    How can I mask or hide my ip address behind a 'friendly name' when users
    access my web app via web browser. Currently, when they hit the app, their
    browser shows 192.xx.xxx.xx instead of 'myserver'. I am running Web logic 7
    on a Win2k server, have specifically chosen not to register the server in
    our enterprise DNS for security reasons.

    Thanks in advance.
    --Bryan

    ---------------------------------------------------------------------------
    Visual & Easy-to-use are not words that you think of when talking about
    network analyzers. Are you sick of the three window text decodes? Download
    ClearSight Network's Analyzer and see a new network analysis tool that
    makes the complex - easy
    http://www.securityfocus.com/sponsor/ClearSightNetworks_security-basics_0310
    21
    ----------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    Visual & Easy-to-use are not words that you think of when talking about
    network analyzers. Are you sick of the three window text decodes? Download ClearSight Network's Analyzer and see a new network analysis tool that
    makes the complex - easy
    http://www.securityfocus.com/sponsor/ClearSightNetworks_security-basics_031021
    ----------------------------------------------------------------------------


  • Next message: Steve: "Re: A reminder that security is not inherently solvable with technology"