[horde] cookies

Chuck Hagenbuch chuck at horde.org
Tue Feb 20 20:45:41 PST 2007


Quoting Kevin Conley <kevinconley at northwestern.edu>:

> What are the purpose of the 3 cookies:
>
> Horde

Session key.

> imp_key

Encryption key for IMP's session credentials.

> auth_key

Encryption key for Horde's password credentials.

The latter two are not strong encryption since the cookie could still  
be intercepted, but it means that you need _both_ access to the  
session store and a user's cookies to get their password, etc.

-chuck

-- 
"we are plastered to the windshield of the bus that is time." - Chris


More information about the horde mailing list