Tag Info

Hot answers tagged

37

Wireshark. Gets HTTP and anything else you want to look at (DNS, usually).


31

Fiddler, hands down! http://www.fiddler2.com/fiddler2/


21

There is a great add-on for Firefox called LocationbarĀ² that does just what you want (and some!). One of its main features is to break the URL into breadcrumbs. In the options dialog you can specify what protocols you'd like to hide: Here is what mine looks like:


16

The HTTP:// string is not a prefix of the URL, it's part of the URL. Which is why you can't (and shouldn't) hide it, since the application is displaying the URL.


13

So now I am unable to support the business requirement of supporting Chrome traffic, and unable to skirt around the unapproved software policy. This is a social problem, so there isn't a sane technical solution to it. (You can obviously do things that violate the security policy, and risk end up getting you fired or reprimanded, or that don't deliver ...


12

According to the Google Issues list for Chromium, this issue was reported in Sep 2008. The NTLM passthrough feature has been given to the Google Summer of Code team. It sounds like it will be worked on in Summer 2009 at the Google Summer of Code. This is good news, and will hopefully bring some stature to Chrome's image in the enterprise. The intranet is so ...


11

Try setting variable named no_proxy in following manner no_proxy=localhost,127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16


8

The only proper way of disabling browser caching is by HTTP headers from the webapp itself. The HTTP 1.1 "Cache-Control" header alone should suffice for any post-year-2000 browser. But for extra protection the server can emit both HTTP 1.1 "Cache-Control" and HTTP 1.0 "Expires" headers together. A hack'ish but sometimes seen way of handling cache ...


7

On many browsers, pressing Control-F5 will reload the page and bypass the cache. The Wikipedia "Bypass your cache" page has details for all modern web browsers. For Chrome, it appears that as of this writing there is a confirmed bug where it will sometimes not bypass cache when reloading with Ctrl+F5 as it is documented. The only option for now is to clear ...


6

DNS is (meant to be) cached until the TTL (Time to Live) on the DNS record expires. The TTL starts counting down from when the DNS record is retrieved. So, if you have a TTL of 5 minutes, then if it's been more than 5 minutes since the DNS record has been retrieved, then it will be re-retrieved. However - this is only how well behaved DNS services work. ...


5

You can install Firefox on your server (or any other broswer) and use a it remotly. On Unix the display can be exported over the network. So you can export it to your windows desktop (X11 can be exported inside SSH, makeing it simple to work) into an application such as xming. The result will be Firefox GUI on your windows computer but actualy running on ...


5

99% might use the HTTP protocol, but there's a lot more than 1% that use HTTP over TLS (ie HTTPS) and they're on different ports, so the browser needs to know which port to open. Also, the browser does guess it.


5

No, not within a static .pac file. The problem would be that you would end up redefining the FindProxyForURL() function when the second file was loaded which would set off the javascript interpreter. You would need to develop a dynamic page (ASP, PHP, etc) that would implement the required logic and then, based on the decision, read in the contents of the ...


5

What I've seen most often is that restrictions like these arise not only out of a desire for conformity, consistency, and easy support, but also because of compliance or reporting requirements. While IT can choose to make exceptions to their own rules on the former category, the latter is more often rooted in forces outside of the IT department itself. ...


4

You have expires max; in your http section and this sets Expires header to 31 December 2037 23:59:59 GMT, and the Cache-Control max-age to 10 years.


4

Instead of telling people what you don't want, why not explain what it is you are trying to achieve ? If all you're after is known data, then go and investigate yourself, or read the documentation of whatever browser (there are hundreds) you are talking about. It may help you to know that this has nothing to do with DNS, though. If a browser gets a ...


4

Add fingerprints/hashes your CSS and JS URLs and set far-future Expires/Cache-Control headers. This is also the technique that Rails Asset Pipeline uses.


4

If you want a basic CA, then I suggest setting up tinyca. On my system I basically setup Ubuntu on a USB flash disk, so I could have my CA be offline. Then I installed tinyca via apt. Once you have your environment ready, just use the GUI to create certs as needed.


4

Why do browsers not use SRV records? Because SRV records did not exist when http was onceived and because http is not assumd to be a service. SRV records have been around for years... Hahaha. Do you remember the time when HTTP started? Wen the first browsers were writtten? THAT was a long time ago. SRV are first in RFC 2782. HTTP goes to RFC 1945 ...


4

Are you sure that you're including the certificate chain provided by the issuer? Many issuers these days use intermediate certificates to establish the chain of trust back to the root CA. Different browsers have different sets of CAs built in. Check the instructions provided by your certificate issuer and make sure you're actually serving any intermediate ...


4

Here is the configuration for the NTLM whitelist: chrome.exe --auth-server-whitelist="*example.com,*foobar.com,*baz" Found this example here: https://sites.google.com/a/chromium.org/dev/developers/design-documents/http-authentication


4

My form is 7 pages long but only prints 1 page in Internet Explorer. I resolved this issue by removing a style "position:absolute" from one of my DIV tags. I think this issue is related to absolute positioning of elements in your HTML page. After I made the change the page prints correctly. I hope this helps!


4

From the perspective of supporting web applications: literally anything other than IE6 would be just fine!


4

Amazon and other sites host their images on separate servers and something is preventing you from accessing it. I had this problem with my webfilter and had to make changes to allow the image servers to be accessed. Barring that, you could have something wrong in your NAT configuration, or as MarkM says DNS, and Wireshark would be a good tool to use at ...


3

I just asked a similar queston. I belive part of the trade off is cost and security. If one cert is compromised thats just one out of 5-10 but you are paying more per cert. If you have one cert it is less but if it gets compromised you are looking at 10 points of failure now. From another site: SSL Wildcard Certificates won't work for multiple levels. ...


3

I don't necessarily think it's a good thing. There are perfectly valid reasons why corporations at least prefer to standardise on a single browser (whichever browser that be), including having a known-good baseline across all PCs. If you ever work anywhere where - for example - something like Oracle financials is used, you will understand at least part of ...


3

If you don't need to keep each OS instance running at the same time then a pretty basic PC-class machine should be adequate. If you do, you'll need to ramp up the memory a little, so consider maybe a 64-bit Windows Server 2008 solution with at least 8 GB RAM. Carving off 512 MB of this for each XP instance (I'd also put each of the other browsers into a ...


3

Firefox MSI with lockdown features through Group Policies like FrontMotion's Firefox Community Edition.


3

ShellExecute the URL.


3

In Windows XP For HTTP: HKEY_CLASSES_ROOT\http\shell\open\command The format is like this: HKEY_CLASSES_ROOT\[prot]\shell\open\command where [prot] is the protocol (HTTP, FTP..) In Windows Vista For HTTP: HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http The format is like this: ...



Only top voted, non community-wiki answers of a minimum length are eligible