Re: [mv] Check for security mode

[Mike Heins <mike@heins.net>]

>> In MiniVend 4, you will be able to get the status in $Session->{secure} or
>> [data session secure].

> Thanks. [data session secure] exists already in MV 3, but evaluates 
> always to 1.
> 

Yes, which fits its originally intended purpose; I guess that means
MiniVend is showing its age (first installations in 1995).

Back when SSL browsers and servers were not so common, you could not be
certain the user had SSL. And it was infuriating and misleading to
send the user to a place where they would get "protocol not implemented" or
something like that.

So the secure flag was to show whether you could expect the user to
accept a secure page; it worked in conjunction with the "secure" and
"unsecure" form submission actions and the [process-order] tag.

Now that virtually all browsers support SSL, I will take the
compatibility-breaking opportunity to change it to something
more useful in MiniVend 4. Though maybe I should just put in a
new "https" session flag...nah. I am committed to getting rid
of all of the old cruft, which will be seen when I finally get
the MV4 alpha out.  ADN. (Any Day Now).

-- 
Mike Heins                          http://www.minivend.com/  ___ 
                                    Internet Robotics        |_ _|____
                                    131 Willow Lane, Floor 2  | ||  _ \
It's a little-known fact            Oxford, OH  45056         | || |_) |
that the Y1K problem caused         <mikeh@minivend.com>     |___|  _ <
the Dark Ages. -- unknown           513.523.7621 FAX 7501        |_| \_\