novaBBS - rocksolid.nodes.announce - Re: Change of session management on def3

Change of session management on def3

rocksolid.nodes.announce

Path: i2pn2.org!rocksolid2!def2!.POSTED.rocksolid2!not-for-mail
From: trw...@i2pmail.org (trw)
Newsgroups: rocksolid.nodes.announce
Subject: Change of session management on def3
Date: Sat, 14 Sep 2019 18:52:01 -0400
Organization: Dancing elephants
Lines: 11
Message-ID: <qljqu0$ft7$1@def2.org>
Reply-To: trw <trw@i2pmail.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Sat, 14 Sep 2019 22:51:44 -0000 (UTC)
Injection-Info: def2.org; posting-host="rocksolid2:192.168.1.189";
logging-data="16295"; mail-complaints-to="usenet@def2.org"
User-Agent: FUDforum 3.0.7
X-FUDforum: 0374ec857381230fa83049643ce3cdee <10136>
Xref: rslight rocksolid.nodes.announce:9

by: trw - Sat, 14 Sep 2019 22:52 UTC

As of today, the session management on def3 will no longer work with cookies, but by URL session only.
This is an attempt to make the forum software fit to be used on tor as well.
As a result. the session token in the querystring (&S=....) is your only identifier for any session. If you give the
session token away, an attacker could log in to your account with it, so keep it to yourself.
To minimize the risk, sessions are ended after 2 min of idleness, so if you need a lot of time for writing a message,
you might be locked out during that time.
This is not comfortable, but the price for (some) security.
This behavior might be improved later.

cheers

trw
Posted on: def3.i2p

Re: Change of session management on def3

rocksolid.nodes.announce

Path: i2pn2.org!rocksolid2!def2!.POSTED.rocksolid2!not-for-mail
From: trw...@i2pmail.org (trw)
Newsgroups: rocksolid.nodes.announce
Subject: Re: Change of session management on def3
Date: Sun, 15 Sep 2019 16:54:49 -0400
Organization: Dancing elephants
Lines: 0
Message-ID: <qlm8eb$n4m$1@def2.org>
References: <qljqu0$ft7$1@def2.org>
Reply-To: trw <trw@i2pmail.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Sun, 15 Sep 2019 20:54:35 -0000 (UTC)
Injection-Info: def2.org; posting-host="rocksolid2:192.168.1.189";
logging-data="23702"; mail-complaints-to="usenet@def2.org"
User-Agent: FUDforum 3.0.7
X-FUDforum: 0374ec857381230fa83049643ce3cdee <10139>
Xref: rslight rocksolid.nodes.announce:11

by: trw - Sun, 15 Sep 2019 20:54 UTC

Try to have as good a life as you can under the circumstances.

rocksolid / Rocksolid Nodes Announce / Re: Change of session management on def3

Subject	Author
Change of session management on def3	trw
Re: Change of session management on def3	trw