Re: Double authentication

Fabio Casadei wrote:

...
> Everything seemed to work fine, until i noticed that two different
> clients, associated with the same account, can successfully log in at
> the same time. This sounds very bad because anyone can surf under false
> identity, if he can steal a valid username and password.

hello fabio,

multiple logins with the same username/passwd are allowed by design.

but why should anyone be able to steal these things? and how?

regards

ulric