Switching to HTML Local Storage for Sessions--Any Issues?

[Rising, Matt]

Thank you for the feedback!  Scott's strong endorsement of the feature definitely alleviates any concerns we had.

Matt Rising

From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Domingues, Michael D
Sent: Wednesday, November 8, 2017 7:41 AM
To: Shib Users <users at shibboleth.net>
Subject: Re: Switching to HTML Local Storage for Sessions--Any Issues?

SAML logout works fine with client-side storage, at least using HTML Local Storage.

CAS, however, does require shared server-side storage [1].

Michael


________________________________
From: users <users-bounces at shibboleth.net<mailto:users-bounces at shibboleth.net>> on behalf of Liam Hoekenga <liamr at umich.edu<mailto:liamr at umich.edu>>
Sent: Tuesday, November 7, 2017 4:00:34 PM
To: Shib Users
Subject: Re: Switching to HTML Local Storage for Sessions--Any Issues?

Aren't (weren't?) there certain features that require server-side storage (CAS?  logout?)?

Liam


On Tue, Nov 7, 2017 at 3:02 PM, Cantor, Scott <cantor.2 at osu.edu<mailto:cantor.2 at osu.edu>> wrote:
>  The docs for the option provide a mixed-message stating
> that the devs have "relatively little experience with use of Local Storage" and
> "OSU has been using this for [1 year] without issues."

I've removed the warnings and notes about it, there's no reason to be scaring anybody off. Compared to a database or memcache, I'd trust this orders of magnitude more.

-- Scott


--

To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171108/df7969d0/attachment.html>