disclosure of IP address in cookie

Peter Schober peter.schober at univie.ac.at
Fri Jul 5 11:51:51 EDT 2013


* David Langenberg <davel at uchicago.edu> [2013-07-05 17:47]:
> Are you perhaps using the Memcache IdP storage plugin?  That plugin
> sets the _idp_authn_lc_key cookie.

That's mostly irrelevant since the IdP's default session cookie also
contains that same information.
-peter


More information about the users mailing list