[Openid-specs-ab] [Bitbucket] Issue #873: session 4.1. Can we use opbs with http (not httponly) (openid/connect)

[Mike Jones]

George or Phuong, could one of you please provide specific proposed text changes for this issue?

                                                            Thanks,
                                                            -- Mike

From: Phuong Le [mailto:issues-reply at bitbucket.org]
Sent: Thursday, September 19, 2013 10:05 PM
To: Mike Jones
Subject: Re: [Bitbucket] Issue #873: session 4.1. Can we use opbs with http (not httponly) (openid/connect)

[phuongle]

Phuong Le commented on issue #873:

session 4.1. Can we use opbs with http (not httponly)<https://bitbucket.org/openid/connect/issue/873/session-41-can-we-use-opbs-with-http-not>


Yes, that's reason I would confirm whether if it is possible to store the opbs on browser and what the opbs' value should be to avoid the security issue.




View this issue<https://bitbucket.org/openid/connect/issue/873/session-41-can-we-use-opbs-with-http-not> or add a comment by replying to this email.


Unwatch this issue<https://bitbucket.org/openid/connect/issue/873/unwatch/mbj/a8746e6417c83baf247203db3c7943b0d9a03b87/> to stop receiving email updates.

[Bitbucket]<https://bitbucket.org>




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20131015/337a7f39/attachment.html>