Re: A Letter to the Authors of Web Authentication Libraries

2009-05-09 Thread Mike Orr
On Sat, May 9, 2009 at 7:14 AM, Paul Johnston wrote: > > Ross, your reply is also line noise and if you read the site you'll > understand why. No need to be arrogant and insult people. "Your reply is line noise"? "Go to another site to find out why"? That really makes people trust what you ha

Re: A Letter to the Authors of Web Authentication Libraries

2009-05-09 Thread Ben Bangert
On May 9, 2009, at 8:40 AM, Ross Lawley wrote: Its not *just* noise, its not the first time such conversations have come up and I'm yet to be convinced javascript can provide a solid solution. No one ever said it was fool-proof, its an alternative to using SSL. I've never heard anyone pro

Re: [Webhelpers] Can't add class attribute to secure_form

2009-05-09 Thread Antonio
* 08/05/2009, Jan Koprowski wrote : > > Hi ! > > I try add "class" attribute to secure_form like this: ${h.secure_form > ('/account/change_password', method='post', class='a')} > but i get only foloowing backtrace class is a reserved word in python: ${h.secure_form('/account/change_password

Re: A Letter to the Authors of Web Authentication Libraries

2009-05-09 Thread Ross Lawley
Paul, Its not *just* noise, its not the first time such conversations have come up and I'm yet to be convinced javascript can provide a solid solution. As a user I can I login without js and with js enabled? Certain devices might not have js enabled, do I have to cater for that as well purely on

Re: A Letter to the Authors of Web Authentication Libraries

2009-05-09 Thread Paul Johnston
Ross, your reply is also line noise and if you read the site you'll understand why. --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "pylons-devel" group. To post to this group, send email to pylons-devel@googlegroups.

Re: A Letter to the Authors of Web Authentication Libraries

2009-05-09 Thread Ross Lawley
Not sure I agree with this, Requiring javascript for login / authentication is crazy as it means those without js can't authenticate. If you allow both methods you just then you increased the the attack vector by 100%. Ross On Sat, May 9, 2009 at 7:28 AM, Paul Johnston wrote: > > Hi, > > Good