Re: A Django Async Roadmap

2018-06-04 Thread Rigel
learn, but flexible and powerful at the same time. Rigel. On Mon, Jun 4, 2018 at 3:17 PM, Andrew Godwin wrote: > Hello everyone, > > For a while now I have been working on potential plans for making Django > async-capable, and I finally have a plan I am reasonably happy with and

Re: Should the Django session-id be hashed?

2016-09-22 Thread Rigel
Thanks for ticket link. Would you mind if I assigned it to myself? I have a few ideas on how it could be put together, and I'd like to work on it tonight and submit a proposal. Rigel. On Thu, Sep 22, 2016 at 2:23 PM, Tim Graham wrote: > The idea of adding an option to store the session

Re: Should the Django session-id be hashed?

2016-09-22 Thread Rigel
_ you > look up the session? I'm an attacker and I've found a way to read the session database table. I can now impersonate user Bob. If the session-ids were hashed, I would need still need to know's Bob's session-id. Django woudn't store it anywhere on the database. Ri

Should the Django session-id be hashed?

2016-09-22 Thread Rigel
atter? It could be fairly trivial to implement, with the only side effect of being computationally expensive. Still, security is more desirable than efficiency or performance. Rigel. -- You received this message because you are subscribed to the Google Groups "Django developers (Contri