Logout UI question for the community

Cantor, Scott cantor.2 at osu.edu
Wed Nov 30 16:14:44 EST 2016


Accessibility issues aside, I'm increasingly wondering why we would really *want* people deploying a logout interface that actually reported on the success or failure of logout to specific SPs. Even the non-technical people who see that immediately ask why that doesn't just tell an attacker what services they can get into if they grab somebody's open workstation, and that certainly is my take on this.

Is there any good reason for trying to report that to the user, vs. an overall "it all worked, or it all didn't work" result?

-- Scott




More information about the users mailing list