Shibboleth Developers

[Scott Cantor <>]

> Maybe we will add the ip check to pubcookie.  It seems like a 
> good idea.  As far a the evil app goes however, it certainly is
> helped if it is in cahoots with the evil coworker behind the
> same firewall.

True.

> In any case, the security hole is smaller than I first thought.
> It is more of a trust thing, as you said a long time ago.
> Although I'd still advise not running a serious application on
> a system where I didn't trust all the other users.

That's good advice no matter what you're doing, certainly.

-- Scott