Randy was commenting on today's article about using several Firefox profiles pointing out that he would love a list of the security add-ons that I was using in my secure profile. One of those is called View Dependencies. You have to understand that loading a website is not like downloading one file to your computer. A website can be broken into several files that are all downloaded separately.
It's mostly images and scripting files like stylesheets that are downloaded. Now for security purposes I want to know where the files are loaded from. Say I connect to my bank's website and take a look at the downloaded files only to see that some scripts are loaded from a Chinese server. Should I be worried about that ? **** yeah I should. A rule of thumb is that files should only be downloaded from the website it is serving the files, at least when it comes to commercial or financial websites.
It does not really matter if a blog loads images from Flickr for example. It still could be that the server the files are loaded from belong to the same company but I would not take that risk. I would immediately call them and ask for an explanation and stop whatever I was doing.
The Firefox add-on adds a new tab into the Page Info window that is called Dependencies. What I really like is that you see with one glimpse if the files have been send by more than one server. It is furthermore possible to exactly see which files have been served by which server.
I know that several other applications do the same, Firebug for instance can do that to. Firebug however is a huge add-on and I prefer this cleaner smaller add-on for this purpose.
Firefox View Dependencies
It's mostly images and scripting files like stylesheets that are downloaded. Now for security purposes I want to know where the files are loaded from. Say I connect to my bank's website and take a look at the downloaded files only to see that some scripts are loaded from a Chinese server. Should I be worried about that ? **** yeah I should. A rule of thumb is that files should only be downloaded from the website it is serving the files, at least when it comes to commercial or financial websites.
It does not really matter if a blog loads images from Flickr for example. It still could be that the server the files are loaded from belong to the same company but I would not take that risk. I would immediately call them and ask for an explanation and stop whatever I was doing.
The Firefox add-on adds a new tab into the Page Info window that is called Dependencies. What I really like is that you see with one glimpse if the files have been send by more than one server. It is furthermore possible to exactly see which files have been served by which server.
I know that several other applications do the same, Firebug for instance can do that to. Firebug however is a huge add-on and I prefer this cleaner smaller add-on for this purpose.
Firefox View Dependencies
