Re: [Django] #12417: Add signing and signed cookies to Django

[Django]

#12417: Add signing and signed cookies to Django
-+-
 Reporter:  simon|Owner:  simon
 Type:  New feature  |   Status:  closed
Component:  Core (Other) |  Version:  SVN
 Severity:  Normal   |   Resolution:  fixed
 Keywords:  Link Building| Triage Stage:  Accepted
  services   |  Needs documentation:  0
Has patch:  1|  Patch needs improvement:  1
  Needs tests:  0|UI/UX:  0
Easy pickings:  0|
-+-
Changes (by michaelreye01@…):

 * keywords:   => Link Building services
 * ui_ux:   => 0


Comment:

 updated ticket issue problem has been solved i hope.
 [http://bestseoservicescompany.com/ Link Building Company]

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-updates@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Re: [Django] #12417: Add signing and signed cookies to Django

[Django]

#12417: Add signing and signed cookies to Django
---+--
   Reporter:  simon|  Owner:  simon
   Type:  New feature  | Status:  closed
  Milestone:   |  Component:  Core (Other)
Version:  SVN  |   Severity:  Normal
 Resolution:  fixed|   Keywords:
   Triage Stage:  Accepted |  Has patch:  1
Needs documentation:  0|Needs tests:  0
Patch needs improvement:  1|  Easy pickings:  0
---+--
Changes (by jezdez):

 * status:  new => closed
 * resolution:   => fixed


Comment:

 In [16253]:
 {{{
 #!CommitTicketReference repository="" revision="16253"
 Fixed #12417 -- Added signing functionality, including signing cookies.
 Many thanks to Simon, Stephan, Paul and everyone else involved.
 }}}

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-updates@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Re: [Django] #12417: Add signing and signed cookies to Django

[Django]

#12417: Add signing and signed cookies to Django
---+--
   Reporter:  simon|  Owner:  simon
   Type:  New feature  | Status:  new
  Milestone:   |  Component:  Core (Other)
Version:  SVN  |   Severity:  Normal
 Resolution:   |   Keywords:
   Triage Stage:  Accepted |  Has patch:  1
Needs documentation:  0|Needs tests:  0
Patch needs improvement:  1|  Easy pickings:  0
---+--
Changes (by jezdez):

 * needs_better_patch:  0 => 1
 * easy:   => 0


-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-updates@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Re: [Django] #12417: Add signing and signed cookies to Django

[Django]

#12417: Add signing and signed cookies to Django
---+
   Reporter:  simon|Owner:  simon
   Type:  New feature  |   Status:  new
  Milestone:   |Component:  Core (Other)
Version:  SVN  | Severity:  Normal
 Resolution:   | Keywords:
   Triage Stage:  Accepted |Has patch:  1
Needs documentation:  0|  Needs tests:  0
Patch needs improvement:  0|
---+
Changes (by mattmcc):

 * type:   => New feature
 * severity:   => Normal


-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-updates@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Re: [Django] #12417: Add signing and signed cookies to Django

[Django]

#12417: Add signing and signed cookies to Django
-+--
  Reporter:  simon   | Owner:  simon
Status:  new | Milestone:   
 Component:  Core framework  |   Version:  SVN  
Resolution:  |  Keywords:   
 Stage:  Accepted| Has_patch:  1
Needs_docs:  0   |   Needs_tests:  0
Needs_better_patch:  0   |  
-+--
Changes (by jezdez):

  * milestone:  1.3 =>

Comment:

 The deadline for new features has passed, removing 1.3 milestone.

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-updates@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Re: [Django] #12417: Add signing and signed cookies to Django

[Django]

#12417: Add signing and signed cookies to Django
-+--
  Reporter:  simon   | Owner:  simon
Status:  new | Milestone:  1.3  
 Component:  Core framework  |   Version:  SVN  
Resolution:  |  Keywords:   
 Stage:  Accepted| Has_patch:  1
Needs_docs:  0   |   Needs_tests:  0
Needs_better_patch:  0   |  
-+--
Comment (by tsuraan):

 There are no signs of this work in django's svn repository.  Are signed
 cookies planned for 1.3?

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-updates@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Re: [Django] #12417: Add signing and signed cookies to Django

[Django]

#12417: Add signing and signed cookies to Django
-+--
  Reporter:  simon   | Owner:  simon
Status:  new | Milestone:  1.3  
 Component:  Core framework  |   Version:  SVN  
Resolution:  |  Keywords:   
 Stage:  Accepted| Has_patch:  1
Needs_docs:  0   |   Needs_tests:  0
Needs_better_patch:  0   |  
-+--
Comment (by EmilStenstrom):

 @mr.kamu: The mailing list thread above concluded that a many-eyes
 approach was better than getting a single cryptographer to review the
 code. So the review was done in this mail thread:
 http://groups.google.com/group/django-
 developers/browse_thread/thread/297e8b22006f7f3a - I'm not sure how to
 deem a crowd sourced mail thread "complete" so I leave that up to you.

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-upda...@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Re: [Django] #12417: Add signing and signed cookies to Django

[Django]

#12417: Add signing and signed cookies to Django
-+--
  Reporter:  simon   | Owner:  simon
Status:  new | Milestone:  1.3  
 Component:  Core framework  |   Version:  SVN  
Resolution:  |  Keywords:   
 Stage:  Accepted| Has_patch:  1
Needs_docs:  0   |   Needs_tests:  0
Needs_better_patch:  0   |  
-+--
Comment (by lukeplant):

 A few comments on the patch, while I remember:

 I think that `get_cookie_signer` should return a Signer that is unique for
 cookies e.g. uses `"django.http.cookies" + settings.SECRET_KEY` as the key
 to pass to Signer.  This reduces the likelihood of someone being able to
 forge cookies by using another Signer in the project that happens to be
 exposed and allows attackers to generate signatures for arbitrary content.

 Method `Signer.unsign` should replace `if sig != expected` with code that
 is not vulnerable to timing attacks.

 Also there are some PEP8 fixes needed - double spaces between top level
 definitions in a module, no spaces around '=' for keyword arguments.

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-upda...@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Re: [Django] #12417: Add signing and signed cookies to Django

[Django]

#12417: Add signing and signed cookies to Django
-+--
  Reporter:  simon   | Owner:  simon
Status:  new | Milestone:  1.3  
 Component:  Core framework  |   Version:  SVN  
Resolution:  |  Keywords:   
 Stage:  Accepted| Has_patch:  1
Needs_docs:  0   |   Needs_tests:  0
Needs_better_patch:  0   |  
-+--
Comment (by mr.k...@gmail.com):

 Did this get reviewed by a cryptographer?

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-upda...@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Re: [Django] #12417: Add signing and signed cookies to Django

[Django]

#12417: Add signing and signed cookies to Django
-+--
  Reporter:  simon   | Owner:  simon
Status:  new | Milestone:  1.3  
 Component:  Core framework  |   Version:  SVN  
Resolution:  |  Keywords:   
 Stage:  Accepted| Has_patch:  1
Needs_docs:  0   |   Needs_tests:  0
Needs_better_patch:  0   |  
-+--
Changes (by russellm):

  * stage:  Unreviewed => Accepted

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-upda...@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Re: [Django] #12417: Add signing and signed cookies to Django

[Django]

#12417: Add signing and signed cookies to Django
-+--
  Reporter:  simon   | Owner:  simon
Status:  new | Milestone:  1.3  
 Component:  Core framework  |   Version:  SVN  
Resolution:  |  Keywords:   
 Stage:  Unreviewed  | Has_patch:  1
Needs_docs:  0   |   Needs_tests:  0
Needs_better_patch:  0   |  
-+--
Changes (by russellm):

  * owner:  simom => simon

Comment:

 Also, no idea who simom is :-)

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-upda...@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Re: [Django] #12417: Add signing and signed cookies to Django

[Django]

#12417: Add signing and signed cookies to Django
-+--
  Reporter:  simon   | Owner:  simom
Status:  new | Milestone:  1.3  
 Component:  Core framework  |   Version:  SVN  
Resolution:  |  Keywords:   
 Stage:  Unreviewed  | Has_patch:  1
Needs_docs:  0   |   Needs_tests:  0
Needs_better_patch:  0   |  
-+--
Changes (by russellm):

  * milestone:  1.2 => 1.3

Comment:

 We're past the feature freeze, this will have to wait until 1.3.

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-upda...@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Re: [Django] #12417: Add signing and signed cookies to Django

[Django]

#12417: Add signing and signed cookies to Django
-+--
  Reporter:  simon   | Owner:  simom
Status:  new | Milestone:  1.2  
 Component:  Core framework  |   Version:  SVN  
Resolution:  |  Keywords:   
 Stage:  Unreviewed  | Has_patch:  1
Needs_docs:  0   |   Needs_tests:  0
Needs_better_patch:  0   |  
-+--
Changes (by anonymous):

  * owner:  anonymous => simom
  * status:  assigned => new
  * stage:  Accepted => Unreviewed
  * milestone:  1.3 => 1.2

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-upda...@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Re: [Django] #12417: Add signing and signed cookies to Django

[Django]

#12417: Add signing and signed cookies to Django
-+--
  Reporter:  simon   | Owner:  anonymous
Status:  assigned| Milestone:  1.3  
 Component:  Core framework  |   Version:  SVN  
Resolution:  |  Keywords:   
 Stage:  Accepted| Has_patch:  1
Needs_docs:  0   |   Needs_tests:  0
Needs_better_patch:  0   |  
-+--
Changes (by anonymous):

  * owner:  nobody => anonymous
  * status:  new => assigned
  * stage:  Unreviewed => Accepted
  * milestone:  1.2 => 1.3

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-upda...@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Re: [Django] #12417: Add signing and signed cookies to Django

[Django]

#12417: Add signing and signed cookies to Django
-+--
  Reporter:  simon   | Owner:  nobody
Status:  new | Milestone:  1.2   
 Component:  Core framework  |   Version:  SVN   
Resolution:  |  Keywords:
 Stage:  Unreviewed  | Has_patch:  1 
Needs_docs:  0   |   Needs_tests:  0 
Needs_better_patch:  0   |  
-+--
Changes (by simon):

  * has_patch:  0 => 1
  * version:  1.1 => SVN
  * milestone:  => 1.2

Comment:

 Patch is basically ready, but we're going to hold off committing it until
 we've had it reviewed by a real cryptographer. The plan is to get it in
 before the 1.2 beta feature freeze.

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

--

You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-upda...@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.

Re: [Django] #12417: Add signing and signed cookies to Django

[Django]

#12417: Add signing and signed cookies to Django
-+--
  Reporter:  simon   | Owner:  nobody
Status:  new | Milestone:
 Component:  Core framework  |   Version:  1.1   
Resolution:  |  Keywords:
 Stage:  Unreviewed  | Has_patch:  0 
Needs_docs:  0   |   Needs_tests:  0 
Needs_better_patch:  0   |  
-+--
Changes (by simon):

  * needs_better_patch:  => 0
  * needs_tests:  => 0
  * needs_docs:  => 0

Comment:

 Under discussion here: http://groups.google.com/group/django-
 developers/browse_thread/thread/d9d635afb6d1820f

-- 
Ticket URL: 
Django 
The Web framework for perfectionists with deadlines.

--

You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To post to this group, send email to django-upda...@googlegroups.com.
To unsubscribe from this group, send email to 
django-updates+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/django-updates?hl=en.