[cosmo-dev] options to fix security hole

[Grant Baillie]

Randy Letness wrote:
> Grant Baillie wrote:
>>> The client work boils down to including some extra data (tickets) as 
>>> a header in the request.  We just need to agree on the format and we 
>>> should be set.
>>
>> Would just specifying multiple Ticket: headers work?
>
> Sure, so how about the format
>
> X-MorseCode-Ticket: slkdfjlsd 
Sure, that sounds fine.

--Grant