Re: Double authentication

You can´t control who is going to steal users or passwords, that is another 
part of security, that´s not software. I think that this is well done.


>From: ulrich schwarz <[email protected]>
>CC: [email protected]
>Subject: Re: [NoCat] Double authentication
>Date: Tue, 20 Sep 2005 12:19:52 +0200
>
>Fabio Casadei wrote:
>
>...
> > Everything seemed to work fine, until i noticed that two different
> > clients, associated with the same account, can successfully log in at
> > the same time. This sounds very bad because anyone can surf under false
> > identity, if he can steal a valid username and password.
>
>hello fabio,
>
>multiple logins with the same username/passwd are allowed by design.
>
>but why should anyone be able to steal these things? and how?
>
>regards
>
>ulric
>
>_______________________________________________
>NoCat mailing list
>[email protected]
>http://lists.nocat.net/mailman/listinfo/nocat