Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 176432

Stack Exchange's own OpenID provider, used for "log in with Stack Exchange" and potentially used for logging into other OpenID consumers.

24 votes
5 answers
2k views

Stack Exchange OpenID credentials not removed on logout, allowing insecure re-login

The cookies for subdomain, 'openid.stackexchange.com' are not, as claimed, actually removed from the browser upon logging out of stackexchange.com, but they should be. Applies to: * stackexchange.com …
MarkDBlackwell's user avatar
7 votes

Stack Exchange OpenID credentials not removed on logout, allowing insecure re-login

The Stack Exchange Network (Relying Party, RP), before any kind of logout, should ask whether logging out from the current OpenID Provider (OP) is also desired, as suggested in mailing list, 'openid-g …
MarkDBlackwell's user avatar
-1 votes

New Stack Exchange users are registered with OpenID provider without notice or consent

The StackExchange registration web pages, if the new user selects 'authorization with StackExchange', should include this warning text (important for OpenID-naive new users). "Security note: this wil …
MarkDBlackwell's user avatar
-16 votes
4 answers
640 views

New Stack Exchange users are registered with OpenID provider without notice or consent

Apparently, new users of the Stack Exchange Network automatically are being registered with an OpenID provider. The registration process appears misleadingly merely to offer an option to register with …
MarkDBlackwell's user avatar