Remember Rule #1: You can't solve social problems using technical means. The social problem is that people keep using IE6. The technical means are to protect them by pandering to IE6 security lapses. The social solution is to tell people "FFS, STOP USING IE^111".
For all the reasons Brion gave below, I support the idea of checking to see if the browser is IE6, and if it is, then give them a header that says "We can no longer provide you with a secure browsing experience because you are using Internet Explorer 6" followed by a dump of the raw wikitext with any angle brackets replaced by < and >. ________________________________________ From: wikitech-l-bounces@lists.wikimedia.org [wikitech-l-bounces@lists.wikimedia.org] on behalf of Brion Vibber [brion@pobox.com]
For 1) I'm honestly a bit willing to sacrifice a few IE 6 users at this point; the vendor's dropped support, shipped three major versions, and is actively campaigning to get the remaining users to upgrade. :) But I get protecting, so if we can find a workaround that's ok.