public inbox for gnats-prs@sourceware.org
help / color / mirror / Atom feed
* Re: gnatsweb/91: Bad security with cookie
@ 2001-08-19 14:21 yngves
  0 siblings, 0 replies; 2+ messages in thread
From: yngves @ 2001-08-19 14:21 UTC (permalink / raw)
  To: gnats-prs, guy, yngves

Synopsis: Bad security with cookie

State-Changed-From-To: analyzed->closed
State-Changed-By: yngves
State-Changed-When: Sun Aug 19 14:21:51 2001
State-Changed-Why:
    Two changes made to Gnatsweb 4:
    - username and password are camouflaged in the db_prefs cookie.
    - Added a configuration variable which makes Gnatsweb use only temporary cookies for db_prefs, i.e. cookies that aren't stored on disk and which are deleted when the user exits the browser.
    
    The first measur provides very limited security, but the second one makes things genuinely safer, although it makes things slightly less convenient for users.

http://sources.redhat.com/cgi-bin/gnatsweb.pl?cmd=view&pr=91&database=gnats


^ permalink raw reply	[flat|nested] 2+ messages in thread
* Re: gnatsweb/91: Bad security with cookie
@ 2001-08-16  0:52 yngves
  0 siblings, 0 replies; 2+ messages in thread
From: yngves @ 2001-08-16  0:52 UTC (permalink / raw)
  To: gnats-prs, guy, yngves

Synopsis: Bad security with cookie

State-Changed-From-To: open->analyzed
State-Changed-By: yngves
State-Changed-When: Thu Aug 16 00:52:51 2001
State-Changed-Why:
    Planning to obfuscate passwords in login cookie.

http://sources.redhat.com/cgi-bin/gnatsweb.pl?cmd=view&pr=91&database=gnats


^ permalink raw reply	[flat|nested] 2+ messages in thread
end of thread, other threads:[~2001-08-19 14:21 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2001-08-19 14:21 gnatsweb/91: Bad security with cookie yngves
  -- strict thread matches above, loose matches on Subject: below --
2001-08-16  0:52 yngves

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).