On Fri, Sep 30, 2011 at 6:01 PM, Dmitry Chestnykh
<[email protected]>wrote:

> On Sep 30, 2011, at 17:58 , Stephan Beal wrote:
> I'm thinking about reusing the current "cookie" column for the per-user
> secret key. But this will require careful handling of migrations to avoid
> introducing security bugs. Not sure what's better.
>

As a general rule, i prefer to avoid re-using any fields for different
semantics, but i cannot say for certain if doing so here would break
anything in significant ways. It might invalidate a login after an upgrade,
but that's no big deal.

-- 
----- stephan beal
http://wanderinghorse.net/home/stephan/
_______________________________________________
fossil-users mailing list
[email protected]
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users

Reply via email to