0

Possible Duplicate:
Stack Exchange OpenID credentials not removed on logout, allowing insecure re-login

I'm having big problems with current auto-login feature. It is similar problem as stated here, it was marked as but I'm pretty sure it isn't, because button that has to be there ("Log Out Everywhere") isn't on its place.

Imagine I'm in town library, I login to Stack Overflow and sometimes to Area51, too. When I'm going out I just click "Logout" on both sites and system says that Clicking Log Out will clear all local credentials in your browser, and log you out on all devices..

That's a lie. When I click "Log Out", it redirects me to the index and I'm logged out successfully, however, when I click login again, unluckily "Welcome Martin, you're being redirected" appears.

  • 1
    You also ahve to log out of your openID provider. If you use google or facebook, you have to log out there as well. – Pollyanna Feb 11 '12 at 22:56
  • @Adam hmm. Stack Exchange haven't used my Facebook account since 15th January. I'll revoke their permissions. Let's see – Martin. Feb 11 '12 at 22:59
  • How did you log into Stack Exchange at the library? You signed in with either the stack exchange openID, or with another service (such as google, facebook, or something else). What service did you use to log in initially? – Pollyanna Feb 11 '12 at 23:01
  • @Adam from Facebook. Actually, library was just an example, I have never logged from there, but I just wanted to show how dangerous is it. – Martin. Feb 11 '12 at 23:02

Browse other questions tagged .