Search Results
Search type | Search syntax |
---|---|
Tags | [tag] |
Exact | "words here" |
Author |
user:1234 user:me (yours) |
Score |
score:3 (3+) score:0 (none) |
Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
Views | views:250 |
Code | code:"if (foo != bar)" |
Sections |
title:apples body:"apples oranges" |
URL | url:"*.example.com" |
Saves | in:saves |
Status |
closed:yes duplicate:no migrated:no wiki:no |
Types |
is:question is:answer |
Exclude |
-[tag] -apples |
For more details on advanced search visit our help page |
Stack Exchange's own OpenID provider, used for "log in with Stack Exchange" and potentially used for logging into other OpenID consumers.
24
votes
5
answers
2k
views
Stack Exchange OpenID credentials not removed on logout, allowing insecure re-login
The cookies for subdomain, 'openid.stackexchange.com' are not, as claimed, actually removed from the browser upon logging out of stackexchange.com, but they should be.
Applies to:
* stackexchange.com …
7
votes
Stack Exchange OpenID credentials not removed on logout, allowing insecure re-login
The Stack Exchange Network (Relying Party, RP), before any kind of logout, should ask whether logging out from the current OpenID Provider (OP) is also desired, as suggested in mailing list, 'openid-g …
-1
votes
New Stack Exchange users are registered with OpenID provider without notice or consent
The StackExchange registration web pages, if the new user selects 'authorization with StackExchange', should include this warning text (important for OpenID-naive new users).
"Security note: this wil …
-16
votes
4
answers
640
views
New Stack Exchange users are registered with OpenID provider without notice or consent
Apparently, new users of the Stack Exchange Network automatically are being registered with an OpenID provider. The registration process appears misleadingly merely to offer an option to register with …