mozilla / mod_authnz_persona

A persona authentication module for apache
Apache License 2.0
23 stars 15 forks source link

strong random cookie secrets #2

Closed lloyd closed 11 years ago

lloyd commented 11 years ago

We should generate a strong secret at apache startup. Because persona is capable for automatically restarting a session, we can just generate the secret at server startup. All sessions are invalidated at server restart, but we don't care.

To accomplish this we need to understand how to generate a random secret at startup that's shared across client processes.