On 4/28/20 3:20 PM, Thomas Goirand wrote: > That's not the case. An MITM attack could gain a session and maintain it > open, while the end user would just notice "oh shit, I miss-typed the > 2FA numbers, let's try again". Then the only thing the attacker needs to > do is keep the session open to not loose access... I hope you realize that no session is open forever. -- Bernd Zeimetz Debian GNU/Linux Developer http://bzed.de http://www.debian.org GPG Fingerprint: ECA1 E3F2 8E11 2432 D485 DD95 EB36 171A 6FF9 435F
- Re: Salsa update: no more "-guest" ... Russ Allbery
- Re: Salsa update: no more "-guest" ... Thomas Goirand
- Re: Salsa update: no more "-guest" ... Russ Allbery
- Re: Salsa update: no more "-guest" ... Thomas Goirand
- Re: Salsa update: no more "-guest" and m... Paride Legovini
- Re: Salsa update: no more "-guest" ... Russ Allbery
- Re: Salsa update: no more "-guest" ... Thomas Goirand
- Re: Salsa update: no more "-guest" ... Paride Legovini
- Re: Salsa update: no more "-guest" ... Bernd Zeimetz
- Re: Salsa update: no more "-guest" ... Thomas Goirand
- Re: Salsa update: no more "-guest" ... Bernd Zeimetz
- Re: Salsa update: no more "-guest" ... Tomas Pospisek
- Re: Salsa update: no more "-guest" and m... Bernd Zeimetz
- Re: Salsa update: no more "-guest" ... Mattia Rizzolo
- Re: Salsa update: no more "-guest" ... Michael Biebl
- Re: Salsa update: no more "-guest" ... Bernd Zeimetz
- Re: Salsa update: no more "-guest" ... Paride Legovini
- Re: Salsa update: no more "-guest" ... Michael Biebl
- RE:Salsa update: no more "-guest" a... PICCA Frederic-Emmanuel
- Re: Salsa update: no more "-guest" ... Sean Whitton
- Re: Salsa update: no more "-guest" ... Mattia Rizzolo