Collision generating in-memory relay state key

Cantor, Scott cantor.2 at osu.edu
Tue May 28 14:57:53 EDT 2019


Any supported version of the SP uses 32 bytes of random data. So I have to question how you could be running anything that isn't outrageously out of date to get collisions from different servers or transactions. Either that or it's something memcache is doing.

You can always put the relay state back into cookies.

-- Scott




More information about the users mailing list