What to do with ssl="authenticated sessions" + code freeze date for Bugzilla 3.6

Frédéric Buclin lpsolit at gmail.com
Thu Aug 20 00:37:55 UTC 2009


Le 19. 08. 09 22:25, Marc Schumann a écrit :
> this is so? Why can't we log in from an unencrypted page, moving to
> SSL just when logging in? Is it some man-in-the-middle thing?

No idea about MITM attacks. Probably justdave, dveditz, jruderman and
some others would know.

LpSolit



More information about the developers mailing list