Cookies & JavaScript

1. What is JavaScript?
2. What are cookies?
3. Security issues
4. Javascript/cookies can be good for you
5. Myths - what Javascript cannot do
6. How to change browser settings :
   • Netscape 4.x
   • Netscape 6.x
   • Internet Explorer 4.x
   • Internet Explorer 5.x

JavaScript sometimes referred to as "JScript" is a common programming language used at most web sites. Web pages are written in the HTML language, but HTML is very limited in what it can do, so bits of JavaScript are added to supply more functionality. Java is something completely different.

Cookies are part of the normal communication sharing which occurs every time you go to every web page. Every time you type in a web address or click any link, your computer will first have a private conversation with the web server .Information about your computer, your browser, and it's capabilities is sent and similar information about the server is exchanged before the web page is sent to you. Also, if you are registering, signing on, or making purchase selections, this is additional information included in the communication. During this hidden conversation, the web site can send back pieces of info and ask your browser to store them. in it's temporary storage area. This is what we call the cookie file. Then, the cookie info is read back to the server during each conversation when visiting the other pages at that site. The purpose is to store a tracking number, URL of the last page you were last viewing, selections you make while visiting a site, information you entered into a from on that site, your user name, and possibly the email address or password which you had entered (hopefully now stored in an encrypted form). Cookie content looks like this one which I got after signing on at Yahoo. Cookies normally can not be created by sites unless Javascript is also enabled.

Security

Some people are concerned that JavaScript poses a security risk, and they disable it in their web browser's preference settings. Many people also use various third-party tools which filter web content, to block banner ads, pop-ups, and spam, or they use firewall software or hardware for security. These measures are understandable, especially with an older browser version or if the browser security settings are on low.

Legitimate concern: JavaScript was designed to be incapable of causing harm to the user's computer – but security holes are occasionally reported.  While there is some dispute as to whether such holes could cause genuine damage, it is best to stay vigilant.

1. The best defense against malicious use of JavaScript (as well as other scripting technologies) is to be sure you have the most current web browser and have applied the latest operating system updates (see here: Microsoft or Netscape). Check for updates every month!
2. It is a good idea to never use the same password on the Internet that you use for important personal business.
3. Avoid giving your real name or address when you can.
4. Use your email address only for personal communication. Get a new disposable address every year and use that when you purchase or sign up for anything on-line.

Some sites use cookies to store a profile of your browsing habits and personal buying preferences at their site, as expected, but they also sell that info to web advertisers. The surfing and buying profiles supposedly don't contain any info which could identify you personally and we hope this never happens.

Less reason for concern:

• A cookie can only be read by the web site which created it. Your browser will not give a different site access the other site's cookie information.
• A cookies can only store information which you have provided at some point.
• JavaScript is currently the safest web scripting language out there. All known security holes have been closed. Some other scripts and programs emended in web pages can be quite harmful, but JavaScript is not one of those.
• See Cookies And Privacy for more.

  

Javascript and/or cookies can be good for you...

• Several problems caused by incompatible browser versions for different operating systems can be solved. Javascript can detect whether you are using a Mac, Windows, Internet Explorer, Netscape. Then Javascript can modify the page or forward you to a more compatible version of the page.
• Your browser can be told to pre-load images needed on other pages. Large images could otherwise cause a long waiting time.
• Navigation menus which drop down or fly out cannot function without Javascript.
• Javascript is usually the thing that enables the change of appearance which occurs when you mouse over something like a button.
• Many web page gadgets like scrolling news tickers, calculators, clocks, and games on the page are run by Javascript. Special effects can also be created like snow or leaves falling down the page.
• Before you submit an online form, items like email, dates, phone numbers can be checked for correct format. If there is a problem, you if required info is missing, a helpful error message can pop up
• When you make a quantity or shipping choice on an online form, the new total can be instantly displayed.
• Pop-up advertising windows are hated by all. But the original purposes of pop-ups were to serve you. If you use a pop-up killer, be sure there is an easy way to temporarily turn it off.
• When you log-in with a password, a site must have a way to remember that you did so as you proceed to other pages on the site, . The most common method requires Javascript, which is able to ask your browser to create a cookie containing a temporary ID number, and to store the cookie until you leave the site or close your browser.
• Sometimes when you log-in, if you select a "remember me" option, your password will be stored on your computer (in encrypted form), ready for instant log-in on a future visit.
• There are times when the web server must track your current browsing session. Saving and remembering the current state of an ongoing transaction, and what items you wanted to buy, for example.

Javascript cannot…

• It has no access to the contents of your computer. It does have the ability to request permission to do some forms of file management, but it cannot in and of itself read or change the contents of your computer storage devices. languages can do this
• cannot write files (except for cookies), neither on users disks nor on servers
• cannot write Registry entries or similar.
• cannot read the data in browser windows from other servers.
• cannot close "other" windows, create invisible windows, create windows without frames.
• cannot secretly send out emails.
• cannot hide itself
• Your PC cannot be damaged, manipulated, or commanded by . They solely serve as a "temporary storage" for information.

  

Enable Cookies & JavaScript
Your browser settings:

For the service to work properly, enable "cookies" and "JavaScript" in your browser. Select your browser version for instructions:

• Netscape 4.x
• Netscape 6.x
• Internet Explorer 4.x
• Internet Explorer 5.x

 

Netscape Configuration (for 4.x versions)
To enable "cookies"	To enable JavaScript:	To configure security settings:
Click the "Edit" menu. Select "Preferences." Select "Advanced." Either "Accept all cookies" or "Accept only cookies that get sent back to the originating server" should be checked.	Click the "Edit" menu. Select "Preferences." Select "Advanced." "Enable JavaScript" should be checked.	Click the "Window" menu. Select "Security Info." Select "Navigator." Under "Advanced Security (SSL) Configuration," both "Enable SSL (Secure Sockets Layer) v2" and "Enable SSL (Secure Sockets Layer) v3" should be checked.

  

 

Netscape Configuration (for 6.x versions)
To enable "cookies"	To enable JavaScript:	To configure security settings:
Click the "Edit" menu. Select "Preferences." Select "Advanced." Either "Accept all cookies" or "Accept only cookies that get sent back to the originating server" should be checked.	Click the "Edit" menu. Select "Preferences." Select "Advanced." "Enable JavaScript" should be checked.	Click on the "Tasks" menu. Select "Privacy and Security." Select "Security Manager." Choose "Advanced." Choose "Options." Make sure: "Enable SSL version 2" "Enable SSL version 3" and "Enable TLS" are all checked.

  

 

Microsoft Internet Explorer Configuration (for 4.x versions)
To enable "cookies"	To enable JavaScript:	To configure security settings:
Click the "View" menu. Select "Internet Options." Click the "Advanced" tab. Scroll down to the "Cookies" section. Select the option "Always accept cookies."	Click the "View" menu. Select "Internet Options." Click the "Security" tab. Next to "Zone:" select "Internet Zone" from the drop-down list. Either "Low," "Medium," or "High" should be checked.	Click the "View" menu. Select "Internet Options." Click the "Advanced" tab. Scroll down to the "Security" section. Make sure that both "SSL 2.0" and "SSL 3.0" are checked (others might be checked as well; don't change any others).

  

 

Microsoft Internet Explorer Configuration (for 5.x versions)
To enable "cookies"	To enable JavaScript:	To configure security settings:
Click the "Tools" menu. Select "Internet Options." Click the "Security" tab. Make sure that the "Internet" zone is selected. Click on the "Custom Level" Button. Scroll down to the "Cookies" section. Under "Allow per-session cookies" make sure "Enable" is selected.	Click the "Tools" menu. Select "Internet Options." Click the "Security" tab. Make sure that the "Internet" zone is selected. Click on the "Custom Level" Button. Scroll down to the "Scripting" section. Under "Active Scripting" make sure "Enable" is selected.	Click the "Tools" menu. Select "Internet Options." Click the "Advanced" tab. Scroll down to the "Security" section. Make sure that both "SSL 2.0" and "SSL 3.0" are checked (others might be checked as well; don't change any others).

  

 

The JavaScript code that we use is sporadic and is exclusively used for more efficient navigation, to process the information on order forms, for rollover effects, and to enable cookies to be set and read. If JavaScript support is disabled, it will not be possible to use certain control elements. Clicking on any of these elements will be ineffective. However, without the JavaScript support it is still possible to visit our website without discrepancies.

If you have cookies completely turned off it is still possible to visit our website without discrepancies.