@eyedeekay
&eche|on
&zzz
+Irc2PGuest81845
+R4SAS
+RN
+StormyCloud
+acetone
+cumlord
+eche|off
+mareki2p
+orignal
+postman
+qend-irc2p
Arch2
Birdy
BubbRubb
Chrono
Daddy
Dann
DeltaOreo
Irc2PGuest27269
Irc2PGuest304
Irc2PGuest53924
Irc2PGuest65801
Irc2PGuest74254
Irc2PGuest90985
Irc2PGuest92550
Irc2PGuest95708
Onn4l7h
Onn4|7h
Over
Sisyphus
Sleepy
SlippyJoe
Stormycloud_
T3s|4_
Teeed
aargh2
ac9f_
anontor
b3t4f4c3__
dr4wd3
dr|z3d
duanin2
duck
eyedeekay_bnc
gellegery
makoto
matean
n1
nilbog
not_bob_afk
null912
onon_
poriori
profetikla
r00tobo_BNC
shiver_
snex
solidx66
thetia
u5657
uop23ip
w8rabbit
x74a6
xHarr
dr|z3d
another theory, just a theory, regarding flash of white for snark, zzz, is that firefox is treating it as a separate domain on account of the separate cookie and isolating it. haven't researched it, just a theory. I doubt there's anything we can do to have snark share the console cookie?
zzz
dr|z3d, pretty sure it's shared across webapps, you don't have to login separately for each webapp
zzz
and it's shared domain
dr|z3d
you may be right, just a theory. however, when I look at my cookie storage, I see 2 cookies, one for / and one for /susidns
dr|z3d
we also have cookies being set for eepsites via jetty. I vaguely recall trying to turn those off, probably not what we want as default, may dive into it again.
zzz
sure, eepsites are different
dr|z3d
yup, just saying while we were on the subject of cookies. :)
dr|z3d
and we should be ensuring all console/webap cookies are HttpOnly, no?
dr|z3d
here, console is, susidns isn't. but maybe the susidns cookie shouldn't exist.
zzz
we have a whole pile of code in RouterConsoleRunner to ensure all the webapps are on a common auth...
zzz
not sure about separate cookies
zzz
the httponly stuff, and cookies in general, is a huge mess iirc, because the jetty API changed completely from 9.3 to 9.4
zzz
so we'd have to deal with both and have a big debian patch to make it work for both
dr|z3d
yeah, I've always found jetty's cookie management to be less that intuitive, like most of jetty's configuration.
zzz
I've looked at it a couple times and said nah, not worth it
zzz
if firefox clamps down we;ll take another look
orignal
zzz, what's wrong with XU?
orignal
you might have very good bandwidth no ipv4
orignal
*but