From: AES on
When I receive an email which contains a clickable link -- like for
example a message from my friendly Allstate Insurance provider with the
following content (the actual URL part being hidden, but copy-able)


<http://goodhands.allstate.com/servlet/cc6?HtusQSYCDQTV1bGEf6vx126vzgw09Q
G93VaVRVupjjhjyHnL30eVolli%3A%2F%2FnhhKoHgKkQHttklHlLQJhu%2FkLjNtLl%2FOLI
kplL%2F0LkihgkLzghju%3FakljGze232X26XRsveCkveGFIQTAQUKMBmzgFRBmQWRNPQTL9Q
TAQTLS>View as a Web page.

and I click on it (in Eudora) and see a web page in Safari appear on my
screen, is it the built-in server in my MacBook's OS 10.4.11 OS that's
serving the content of this page to my copy of Safari, or the Allstate
web site's server?

How about if I instead press Cmd-Option-B and see what's apparently the
same content appear on screen -- except with a quite different URL in
the Safari toolbar, namely

<file:///private/var/tmp/folders.502/TemporaryItems/3748242+%204.html>

To ask this another way, is the content that I see on the screen
actually within the email message itself, or is it all coming down from
Allstate's site, or does it depend on how I bring it up on the screen?
From: Steve W. Jackson on
In article <siegman-68EB14.10583616072010(a)sciid-srv02.med.tufts.edu>,
AES <siegman(a)stanford.edu> wrote:

> When I receive an email which contains a clickable link -- like for
> example a message from my friendly Allstate Insurance provider with the
> following content (the actual URL part being hidden, but copy-able)
>
>
> <http://goodhands.allstate.com/servlet/cc6?HtusQSYCDQTV1bGEf6vx126vzgw09Q
> G93VaVRVupjjhjyHnL30eVolli%3A%2F%2FnhhKoHgKkQHttklHlLQJhu%2FkLjNtLl%2FOLI
> kplL%2F0LkihgkLzghju%3FakljGze232X26XRsveCkveGFIQTAQUKMBmzgFRBmQWRNPQTL9Q
> TAQTLS>View as a Web page.
>
> and I click on it (in Eudora) and see a web page in Safari appear on my
> screen, is it the built-in server in my MacBook's OS 10.4.11 OS that's
> serving the content of this page to my copy of Safari, or the Allstate
> web site's server?
>
> How about if I instead press Cmd-Option-B and see what's apparently the
> same content appear on screen -- except with a quite different URL in
> the Safari toolbar, namely
>
> <file:///private/var/tmp/folders.502/TemporaryItems/3748242+%204.html>
>
> To ask this another way, is the content that I see on the screen
> actually within the email message itself, or is it all coming down from
> Allstate's site, or does it depend on how I bring it up on the screen?

The URLs you included should actually provide your answer. The first
specifically identifies "goodhands.allstate.com" as its source, so it's
coming from their servers via the Internet. The latter, as a file URL,
comes from location that's on your system. With it displayed, you could
use the Finder's Go To command to navigate to /private/var/tmp and so on
to find that file.
--
Steve W. Jackson
Montgomery, Alabama
From: BreadWithSpam on
"Steve W. Jackson" <stevewjackson(a)knology.net> writes:
> In article <siegman-68EB14.10583616072010(a)sciid-srv02.med.tufts.edu>,
> AES <siegman(a)stanford.edu> wrote:
>
> > <file:///private/var/tmp/folders.502/TemporaryItems/3748242+%204.html>

> coming from their servers via the Internet. The latter, as a file URL,
> comes from location that's on your system. With it displayed, you could
> use the Finder's Go To command to navigate to /private/var/tmp and so on
> to find that file.

Note that this may be misleading. The top-level HTML wrapper
might be stored locally in your tmp folder -- but the page
described by that HTML may be almost entirely remote content - images,
subframes, javascript calls which pull stuff in from elsewhere, etc.
Just because there's a "file:///<stuff>" as the URL doesn't mean the
content is local.

FWIW

--
Plain Bread alone for e-mail, thanks. The rest gets trashed.
From: dorayme on
In article
<stevewjackson-57A8F8.13231616072010(a)news.individual.net>,
"Steve W. Jackson" <stevewjackson(a)knology.net> wrote:

> In article <siegman-68EB14.10583616072010(a)sciid-srv02.med.tufts.edu>,
> AES <siegman(a)stanford.edu> wrote:
>
> > When I receive an email which contains a clickable link -- like for
> > example a message from my friendly Allstate Insurance provider with the
> > following content (the actual URL part being hidden, but copy-able)
> >
> >
> > <http://goodhands.allstate.com/servlet/cc6?HtusQSYCDQTV1bGEf6vx126vzgw09Q
> > G93VaVRVupjjhjyHnL30eVolli%3A%2F%2FnhhKoHgKkQHttklHlLQJhu%2FkLjNtLl%2FOLI
> > kplL%2F0LkihgkLzghju%3FakljGze232X26XRsveCkveGFIQTAQUKMBmzgFRBmQWRNPQTL9Q
> > TAQTLS>View as a Web page.
> >
> > and I click on it (in Eudora) and see a web page in Safari appear on my
> > screen, is it the built-in server in my MacBook's OS 10.4.11 OS that's
> > serving the content of this page to my copy of Safari, or the Allstate
> > web site's server?
> >

It is not your Mac's server, even if it was turned on (in Sys
Prefs). Is yours even turned on?

> > How about if I instead press Cmd-Option-B and see what's apparently the
> > same content appear on screen -- except with a quite different URL in
> > the Safari toolbar, namely
> >
> > <file:///private/var/tmp/folders.502/TemporaryItems/3748242+%204.html>
> >
> > To ask this another way, is the content that I see on the screen
> > actually within the email message itself, or is it all coming down from
> > Allstate's site, or does it depend on how I bring it up on the screen?
>

Can your Eudora display the html if you want to? I assume so but
that you have it configured not to. It refers links to Safari
instead. Safari, I imagine, does the heavy lifting getting to
know where to go with browser requests from the link that Eudora
stores.

You *can* - perhaps with more patience than it deserves <g> -
test all this stuff. If Eudora really secretly brought everything
from the external server down and cached it, Safari would display
it almost instantly whereas if it was Safari making more or less
direct requests to the server, it would take the time your
connection speed allows. But why would Eudora really do this if
it could already act as a browser and you are virtually asking it
not to.

What actually happens is that the email program is *angry*. It is
offended that you are preferring a specialist for something that
it could do. It is not going to lift a finger now that you have
so offended it. So it grudgingly only does the least thing it can
do, namely, let Safari know what link to follow. It is an
absurdly long link, it stores as 3748242+%204.html.

Perhaps you might go to TemporaryItems and open 3748242+%204.html
directly in a text editor and have a look and tell us what it
says, does it have absolute reference paths for all the images
(ie, beginning with http:// is one possibility, there are
others). Is the text there in HTML wrappers?

--
dorayme
From: Barry Margolin on
In article <yobk4ovgon5.fsf(a)panix3.panix.com>,
BreadWithSpam(a)fractious.net wrote:

> "Steve W. Jackson" <stevewjackson(a)knology.net> writes:
> > In article <siegman-68EB14.10583616072010(a)sciid-srv02.med.tufts.edu>,
> > AES <siegman(a)stanford.edu> wrote:
> >
> > > <file:///private/var/tmp/folders.502/TemporaryItems/3748242+%204.html>
>
> > coming from their servers via the Internet. The latter, as a file URL,
> > comes from location that's on your system. With it displayed, you could
> > use the Finder's Go To command to navigate to /private/var/tmp and so on
> > to find that file.
>
> Note that this may be misleading. The top-level HTML wrapper
> might be stored locally in your tmp folder -- but the page
> described by that HTML may be almost entirely remote content - images,
> subframes, javascript calls which pull stuff in from elsewhere, etc.
> Just because there's a "file:///<stuff>" as the URL doesn't mean the
> content is local.
>
> FWIW

And vice versa, a remote web page can contain content that points to
file:///<stuff>.

This has been a frequent way for web sites to trick people into thinking
that their computer is vulnerable to data theft, and getting them to buy
their security software.

--
Barry Margolin, barmar(a)alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***
*** PLEASE don't copy me on replies, I'll read them in the group ***