Tickets :: Comment on [#12041] Authentication does not work any longer

* Your Email Address
* Spam protection	Enter the letters below: .__.. ,. .. ..__ \| \| \./ \| \|\|\ \|[ __ \|__\ \| \|__\|\| \\|[_./
Comment	> Horde_Core 2.2.1 > > I see no need to support session IDs longer than 32 bytes at this > time. MD5 vs. other hashing methods shouldn't matter since we don't > care about the cryptographical properties of these hashing algorithms > - all we are doing is generating random token strings. So there is > no practical benefit of a longer session ID because a token is either > obtained in full or not. > > Additionally, there are some assumptions built in to Horde code that > count on 32 byte (or less) session IDs. No need to do a full audit > at this time just to allow an increase in size.
Attachment
Watch this ticket