https://bugzilla.wikimedia.org/show_bug.cgi?id=46902

       Web browser: ---
            Bug ID: 46902
           Summary: Setup central login domain
           Product: Wikimedia
           Version: wmf-deployment
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: Unprioritized
         Component: Site requests
          Assignee: [email protected]
          Reporter: [email protected]
                CC: [email protected], [email protected],
                    [email protected], [email protected]
            Blocks: 46901
    Classification: Unclassified
   Mobile Platform: ---

To complete bug 46901, we need a single domain where global users will be
logged in, and all of the WMF sites can test check to see if the local wiki
should allow a user to login.

Because this website will have a session for every logged in user, the site
should:
* Highly restrict the javascript that can run on it
* Minimize the amount of content and features, to reduce the risk for XSS
vulnerabilities
* Only be accessible over SSL
* Disallow any iframing

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to