(First, thanks a _lot_ for Squid, Henrik!) [Henrik Nordstrom] | Further, if you pass around the ticket in URLs then this class of | attacks will also have full access to the ticket from the referer | URL, so if you only base your security on these two measurements | (client IP + ticket present in the URL) then your are most likely | at risk here. There are, of course, no reason to add a ticket to off-site links. The tickets are only understandable by our web application. Tickets should only be tied to actions that have side effects on our server (for which GET may be Wrong Thing anyway). If this principle is followed, I can't see how anyone would be able to pick up Referers containing tickets without having access to our server. Please enlighten me if I've misunderstood anything here. Sverre. -- <URL:mailto:shhat_private> <URL:http://shh.thathost.com/>
This archive was generated by hypermail 2b30 : Tue Jun 19 2001 - 12:57:27 PDT