LSTSRV-L Archives

LISTSERV Site Administrators' Forum

LSTSRV-L
Options: Use Monospaced Font
Show Text Part by Default
Condense Mail Headers

Topic: [<< First] [< Prev] [Next >] [Last >>]

Parts/Attachments: text/plain (636 bytes) , application/pgp-signature (291 bytes)
Print Reply
Mime-Version:
1.0
Sender:
LISTSERV give-and-take forum <[log in to unmask]>
Date:
Thu, 16 Dec 1999 18:03:17 -0500
Reply-To:
LISTSERV give-and-take forum <[log in to unmask]>
Subject:
Re: Bookmarks bypassing wa interface login.
From:
Valdis Kletnieks <[log in to unmask]>
Content-Transfer-Encoding:
7bit
In-Reply-To:
Your message of "Fri, 17 Dec 1999 09:23:06 +1100." <[log in to unmask]>
Content-Type:
multipart/signed; boundary="==_Exmh_-249601450P"; micalg=pgp-md5; protocol="application/pgp-signature"
Comments:
To: lsvadmin <[log in to unmask]> To: [log in to unmask]
 
On Fri, 17 Dec 1999 09:23:06 +1100, lsvadmin <[log in to unmask]>  said:
> What I find now is that if I bookmark any page AFTER the login and
> password page, and then select that bookmark later (even after shutting
> the browser down), I can bypass the login.

It's not a bookmark issue.  It's a cookie issue.

If it's a "one person, one PC" situation, it's probably not a problem.

If it's a computer lab or other shared environment, you have OTHER cookie
issues, not just with Listserv.

--
                                Valdis Kletnieks
                                Operating Systems Analyst
                                Virginia Tech

ATOM RSS1 RSS2