Subj : Re: Gopher servers
To : apam
From : Digital Man
Date : Wed Mar 29 2023 10:53 am
Re: Re: Gopher servers
By: apam to Digital Man on Wed Mar 29 2023 09:54 pm
> > your own static/custom content. User content is a bit of a sticky
> > issue due to security and liability concerns, but of course its all
> > doable if you're determined to do it. If you do add user-enabled
> > content, I'd just stick with gopher and not do that for http/https
> > however.
>
> How would user content be any different from having message bases
> available?
>
> I have gopher server built into talisman, and it allows users to keep a
> blog (or phlog or glog or whatever you call it) It's just text, which is
> the same as message bases.
>
> I'm guessing user content in synchronet means files / images as well?
Right, I was thinking *any* files (e.g. malware), especially wrapped in HTML and served via HTTP (the most common delivery method today). Allowing just anyone to park their web-site on your host/IP is kind of a dangerous thing to do. Gopher is obscure enough it's not likely a big target (if at all), but I do recall about 10 years ago a whacker uploading his entire questionnable web-site to dozens of Synchronet FTP servers and using them as his free virtual web host (files uploaded via FTP are often also availble via HTTP on the same BBS).
--
digital man (rob)
Synchronet "Real Fact" #75:
Rob's alias "digital man" was inspired by a song on Rush's 1982 "Signals" album
Norco, CA WX: 47.8�F, 97.0% humidity, 0 mph ENE wind, 0.22 inches rain/24hrs
