Re: Remember Me problems with Safari and IE 7

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--===============3294870358342501418==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature";
	boundary="------------enig2E3A0FD71646DDD333F7F06A"

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig2E3A0FD71646DDD333F7F06A
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Matthew,

Matthew Hixson wrote:
> Remember Me does not work for Safari 3.1.2, but does work for Firefox  =

> 3.0.3, both on OS X.

Hmm... unfortunately, I don't have much experience with the "remember
me" code, and I don't use it myself in any of my projects. Could you
provide an HTTP protocol dump with a clean browser (i.e. no predefined
cookies)? I wonder what the specifics of the Set-Cookie header look
like. Feel free to remove portions of the value, but please keep the
first and last few bytes in-tact so I can see if there's anything weird
in there.

> Is there any reason why Safari is not hanging onto the username and =20
> password cookies and Firefox is?

Does Safari retain the cookies after a logout, but before a restart?

The only thing I can think of is that the cookie itself is of a slightly
different format.

Here's a stupid question: does your web app ask you to login after a
browser restart (i.e. does 'rememberme' work)?

-chris


--------------enig2E3A0FD71646DDD333F7F06A
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkjilmMACgkQ9CaO5/Lv0PAm/wCgv7Ui3EXi0w6yVTI/TDsL+NOt
PPEAoJ2vPCfeMfbLV2Vgo2t4beJwkRkv
=XEaF
-----END PGP SIGNATURE-----

--------------enig2E3A0FD71646DDD333F7F06A--


--===============3294870358342501418==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
--===============3294870358342501418==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
securityfilter-user mailing list
securityfilter-user-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
https://lists.sourceforge.net/lists/listinfo/securityfilter-user

--===============3294870358342501418==--