[sldev] [Upcoming Changes] Website Viewer Authentication

[Anders Arnholm]

On Fri, 2007-09-28 at 14:31 -0700, David Kaprielian (Sabin) wrote:

> 
> With this information, I wanted to get your feedback!  Do you think 
> there's a way we could make website viewer authentication work for all 
> Linux users?  Do you have any specifications for how this will interact 
> with your third party viewers and applications?  Anything I haven't 
> covered that you're worried about?  Thanks for your time everyone, we'd 
> love to hear what you have to say.

The Idea to use a second application Mozilla and type the password there
sending that over the network to ensure that has tampers with my local
computer, is may i say bizarre from a security point of view. Good the
viewer is open source so we can add the functionality to surf to that
website and get the the key into the viewer.

I understand the need for one centralised login page, but to for F**K
honest i don't understand the need to go via sulrs, making the login
part of the OS uri handling. E.g. taking the login credentions out of
the customized viewer can never be a good security idea.

/ Balp


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.