Feeds

NatWest replies to browser banking debacle

Old versions of Netscape are OK

  • alert
  • submit to reddit

High performance access to file storage

NatWest has got back to us over its decision to prevent access to its online banking service for the latest version of Navigator, Mozilla and Opera over security concerns. An official statement read:

"NatWest takes the issue of Internet security extremely seriously. Therefore, our policy is only to add browsers to our approved list for use with NWOLB (NatWest OnLine Banking) once we have fully tested compatibility ourselves.

"Our approved list offers users the flexibility of using Internet Explorer (IE) version 4.0 with service pack 2 to 6.0, and also the Netscape Navigator versions 4.1 to 4.75. The assertion in your recent article that NWOLB can only be accessed by IE browsers is not therefore accurate.

"These system requirements are clearly stated when customers apply for the NatWest OnLine Banking Service.

"We are still in the process of testing Netscape Navigator 4.76, 4.77 and 6 to ensure full compatibility with our service, however we are not suggesting in any way that these browser systems are not secure."

So there you have it. We have been privately assured that NatWest is keen to get the site working with Mozilla. Apparently the security concern with Navigator is thanks to Password Manager remembering passwords - something there is now a fix for. However customers that don't want to use Explorer to access the site are having to downgrade to Netscape 4.75.

There do remain some concerns however and sadly they revolve around the bank's apparent love affair with Microsoft. First of all, it is running on IIS4.0 - the Swiss cheese of servers - which last week Gartner advised companies to steer away from because of endemic security problems.

The browser conflicts appear to be arise from NatWest's shift from running a Java applet to using Microsoft ASP pages (basically Web pages but with Microsoft server-side script in them). And would you believe it, but this appears to conflict with Navigator but not with Explorer. ®

Related Story

NatWest declares war on Internet

High performance access to file storage

More from The Register

next story
Audio fans, prepare yourself for the Second Coming ... of Blu-ray
High Fidelity Pure Audio – is this what your ears have been waiting for?
Dropbox defends fantastically badly timed Condoleezza Rice appointment
'Nothing is going to change with Dr. Rice's appointment,' file sharer promises
Nokia offers 'voluntary retirement' to 6,000+ Indian employees
India's 'predictability and stability' cited as mobe-maker's tax payment deadline nears
It may be ILLEGAL to run Heartbleed health checks – IT lawyer
Do the right thing, earn up to 10 years in clink
France bans managers from contacting workers outside business hours
«Email? Mais non ... il est plus tard que six heures du soir!»
Adrian Mole author Sue Townsend dies at 68
RIP Blighty's best-selling author of the 1980s
Zucker punched: Google gobbles Facebook-wooed Titan Aerospace
Up, up and away in my beautiful balloon flying broadband-bot
Analysts: Bright future for smartphones, tablets, wearables
There's plenty of good money to be made if you stay out of the PC market
Jeff Bezos reveals Amazon's brutal scale in annual letter
Bit-flipping retail mogul seems hybrid of Ford and Rockefeller
prev story

Whitepapers

Mainstay ROI - Does application security pay?
In this whitepaper learn how you and your enterprise might benefit from better software security.
Five 3D headsets to be won!
We were so impressed by the Durovis Dive headset we’ve asked the company to give some away to Reg readers.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Mobile application security study
Download this report to see the alarming realities regarding the sheer number of applications vulnerable to attack, as well as the most common and easily addressable vulnerability errors.