Re: [cpan-questions #32443] Re: rt.cpan.org keeps logging me out.

[email protected] (Shlomi Fish)
Newsgroups perl.module-authors
Message-ID <CANy4znWedzAVqYBEW0CUTBz9gcTpHvyHh1FEsrGCGe70edBSgw@mail.gmail.com>
Hi Karen,

On Mon, Nov 21, 2016 at 7:59 PM, Karen Etheridge <[email protected]> wrote:

> What is the big deal in having to log in again? If you save your
> credentials in your browser, it's literally just one more click.
>
>
The problem is that in order to improve the security of my passwords, I
keep them all encrypted using a master password. Firefox has a built-in
feature for that and, if you don't set a master passwords then the
passwords are stored using a relatively easy-to-reverse process which every
process on the local system can use (or at least those running as the local
user). There's some old discussion of it here:

http://catb.org/~esr/writings/cathedral-bazaar/cathedral-bazaar/ar01s09.html

Since my firefox password is non-trivial, entering it to fill in the
rt.cpan.org password whenever I restart firefox, restart my
https://en.wikipedia.org/wiki/X_Window_System or restart the machine (for a
new kernel, glibc, etc.) is quite a hassle. What will make my life more
tolerable would be a browser add-on that will allow me to keep the
rt.cpan.org password (and only that) unencrypted (as I already have it in
"~/.pause" anyway).


> I'd like to thank the RT admins in providing this service free to the Perl
> community; it is really awesome that a bug queue is created automatically
> for every distribution without the authors having to do a single thing to
> set it up.
>

I'd like to thank them too, but having to login time and again is still a
fly in the ointment.

Regards,

-- Shlomi Fish




>
> On Mon, Nov 21, 2016 at 7:45 AM, Shlomi Fish <[email protected]> wrote:
>
>> Hello Shawn,
>>
>> sorry for the late response. I'm CCing module-authors becase you did not
>> explicitly specify that you wish this reply to be kept private.
>>
>> On Fri, Nov 18, 2016 at 5:56 PM, Shawn M Moore via RT <
>> [email protected]> wrote:
>>
>>> On Fri Nov 18 06:01:48 2016, [email protected] wrote:
>>> > Dear rt-cpan-admin
>>>
>>> Hi Shlomi,
>>>
>>> > On Sat, Feb 27, 2016 at 1:00 PM, Shlomi Fish <[email protected]> wrote:
>>> >
>>> > > Dear sirs and madams,
>>> > >
>>> > > thanks for maintaining http://rt.cpan.org/ .
>>> > >
>>> > > There is, however, a long-standing problem with it that the site keeps
>>> > > logging me out (usually after I close my browser), and I keep having to
>>> > > login again. This makes it frustrating to use rt.cpan.org. Please fix it
>>> > > as soon as possible.
>>>
>>> RT uses session cookies (also called transient cookies) which, as you describe, usually clear when you close your browser. It's a tradeoff we make for security.
>>>
>>> I see. That sounds like a very bad trade off in this day and age,
>> because people often need to reboot for new kernel / new libc / system
>> update / etc. or they need to restart their browsers because they either
>> crashed or started consuming too much RAM (and as you may know - browsers
>> like Firefox or GChromium have recently become memory hogs).
>>
>> I suppose I can convert to use GitHub Issues / GitLab Issues / Bitbucket
>> Issues / etc. - at least for my own CPAN distributions - but this will
>> involve a lot of manual tweaking and uploading new versions. Perhaps it
>> will be the last straw for creating my own Dist Zilla PluginBundle.
>>
>> Regards,
>>
>> -- Shlomi Fish
>>
>>
>>
>>> > > Regards,
>>> > >
>>> > > -- Shlomi Fish
>>>
>>> Best,
>>> Shawn
>>>
>>>
>>
>>
>> --
>> Shlomi Fish http://www.shlomifish.org/
>>
>> You can never truly appreciate The Gilmore Girls until you've watched it
>> in the original Klingon.
>>
>> Please reply to list if it's a mailing list post - http://shlom.in/reply
>> .
>>
>
>


-- 
Shlomi Fish http://www.shlomifish.org/

You can never truly appreciate The Gilmore Girls until you've watched it in
the original Klingon.

Please reply to list if it's a mailing list post - http://shlom.in/reply .
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.