disclosure of IP address in cookie

[David Langenberg]

Not commenting on the value of having that cookie set or not as I don't
maintain that plugin.  Just stating that the likely source of him having
his IdP set that cookie is coming from the use of that plug-in.

Dave


On Fri, Jul 5, 2013 at 9:51 AM, Peter Schober <peter.schober at univie.ac.at>wrote:

> * David Langenberg <davel at uchicago.edu> [2013-07-05 17:47]:
> > Are you perhaps using the Memcache IdP storage plugin?  That plugin
> > sets the _idp_authn_lc_key cookie.
>
> That's mostly irrelevant since the IdP's default session cookie also
> contains that same information.
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
David Langenberg
Identity & Access Management
The University of Chicago
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130705/c0b434b9/attachment.html