https://bugzilla.wikimedia.org/show_bug.cgi?id=17422


Brion Vibber <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WONTFIX




--- Comment #4 from Brion Vibber <[email protected]>  2009-02-18 02:51:24 UTC 
---
URL-based session tokens are unsafe (they leak to 3rd-party referers and in
cut-n-paste), disrupt caching, and are otherwise troublesome -- cookies were
introduced to HTTP precisely to allow state like login sessions to be handled
more sensibly than this.

MediaWiki does not and will not support URL-based sessions due to those
problems.

If you are referring instead to HTTP authentication, that's even harder to deal
with -- there's no native way to close a login session or forget credentials
temporarily. We have no intention to support this either, though there are HTTP
auth plugins available.


-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to