Mozilla: Improving Security for Bugzilla

Posted Sep 7, 2015 17:06 UTC (Mon) by ewan (guest, #5533)
In reply to: Mozilla: Improving Security for Bugzilla by epa
Parent article: Mozilla: Improving Security for Bugzilla

Browsers are fine with SSL client certs. If you're in a community that can issue their own, it works brilliantly - it's decently secure, and 'logging in' is completely transparent, sites just know who you are as soon as you're connected.

Mozilla: Improving Security for Bugzilla

Posted Sep 8, 2015 13:39 UTC (Tue) by cortana (subscriber, #24596) [Link] (1 responses)

It's the logging out that's difficult. Perhaps this is just a failing of the one site I use that uses client certificate authentication, but there doesn't seem to be any way to log out so that I can change users without restarting Firefox.

Mozilla: Improving Security for Bugzilla

Posted Sep 10, 2015 16:58 UTC (Thu) by kvaml (guest, #61841) [Link]

Yes, they should provide a button that forces a 401 authentication error. That should allow you to switch credentials.