[Cosmo-dev] [PATCH] adding password retrieval to cmp

Mike Taylor bear at code-bear.com
Thu Aug 3 19:51:20 PDT 2006


On Aug 3, 2006, at 5:01 PM, Brian Moseley wrote:

> is anybody interested in having this feature added to cosmo? do you
> have any concerns? would the feature's existence be a showstopper for
> your deployment of cosmo?

yea, a big -1 for this - if something like this is added to the api I 
fear that any serious shop will give Cosmo a pass because of the 
security hole - even if the feature can only be used by an admin.

this can become a FAQ entry that points to the patch letting people who 
need it to have it.

---
Bear

Build and Release Engineer
Open Source Applications Foundation (OSAF)
bear at osafoundation.org
http://www.osafoundation.org

bear at code-bear.com
http://code-bear.com

PGP Fingerprint = 9996 719F 973D B11B E111  D770 9331 E822 40B3 CD29


-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: This is a digitally signed message part
Url : http://lists.osafoundation.org/pipermail/cosmo-dev/attachments/20060803/a7be4eeb/PGP.pgp


More information about the cosmo-dev mailing list