openid-security

[security] Notification of new OpenID Connect security testing tool

Wed, 23 Aug 2023 00:03:11 GMT

2023/08/23 -- Junki Yuasa

[security] Question about validating access token with id token at_hash claim after access token has been refreshed

Sat, 13 Feb 2021 21:00:13 GMT

2021/02/13 -- Dickerson, Scott

Re: [security] Security issue with ruby-openid library

Tue, 09 Apr 2019 00:41:55 GMT

2019/04/09 -- Chris

Re: [security] Security issue with ruby-openid library

Sat, 02 Mar 2019 17:20:19 GMT

2019/03/02 -- Chris

Re: [security] Security issue with ruby-openid library

Sat, 02 Mar 2019 07:27:41 GMT

2019/03/02 -- n-sakimura

Re: [security] Security issue with ruby-openid library

Fri, 01 Mar 2019 22:11:53 GMT

2019/03/01 -- Chris

Re: [security] Security issue with ruby-openid library

Thu, 28 Feb 2019 08:39:50 GMT

2019/02/28 -- Axel.Nennker

[security] Security issue with ruby-openid library

Wed, 27 Feb 2019 00:09:53 GMT

2019/02/27 -- Chris

Re: [security] Request splitting/SSRF in php-openid

Fri, 26 Dec 2014 04:13:51 GMT

2014/12/26 -- isciurus

Re: [security] Request splitting/SSRF in php-openid

Fri, 26 Dec 2014 03:45:33 GMT

2014/12/26 -- Kurt Seifried

[security] Request splitting/SSRF in php-openid

Fri, 26 Dec 2014 00:59:57 GMT

2014/12/26 -- isciurus

Re: [security] [Openid-specs-ab] We have published a discovery doc & JWK endpoint

Tue, 18 Mar 2014 06:48:30 GMT

2014/03/18 -- Manger, James

Re: [security] OIC self-issued mode is insecure

Tue, 04 Mar 2014 03:50:19 GMT

2014/03/04 -- Manger, James

Re: [security] OIC self-issued mode is insecure

Mon, 03 Mar 2014 22:40:26 GMT

2014/03/03 -- Mike Jones

Re: [security] OIC self-issued mode is insecure

Mon, 03 Mar 2014 22:37:35 GMT

2014/03/03 -- Manger, James

Re: [security] OIC self-issued mode is insecure

Mon, 03 Mar 2014 11:12:13 GMT

2014/03/03 -- Mike Jones

Re: [security] reporting security flaws

Mon, 03 Mar 2014 08:18:07 GMT

2014/03/03 -- John Bradley

Re: [security] OIC self-issued mode is insecure

Mon, 03 Mar 2014 07:35:32 GMT

2014/03/03 -- Mike Jones

Re: [security] OIC self-issued mode is insecure

Mon, 03 Mar 2014 07:03:13 GMT

2014/03/03 -- n-sakimura

Re: [security] reporting security flaws

Mon, 03 Mar 2014 00:45:07 GMT

2014/03/03 -- Pamela Dingle

[security] reporting security flaws

Sun, 02 Mar 2014 23:54:27 GMT

2014/03/02 -- Manger, James

Re: [security] OIC self-issued mode is insecure

Sun, 02 Mar 2014 20:38:30 GMT

2014/03/02 -- Pamela Dingle

Re: [security] OIC self-issued mode is insecure

Fri, 28 Feb 2014 00:51:06 GMT

2014/02/28 -- Manger, James

Re: [security] OIC self-issued mode is insecure

Wed, 26 Feb 2014 13:36:13 GMT

2014/02/26 -- Manger, James

Re: [security] OIC self-issued mode is insecure

Wed, 26 Feb 2014 13:36:07 GMT

2014/02/26 -- Nat Sakimura

Re: [security] OIC self-issued mode is insecure

Wed, 26 Feb 2014 08:11:33 GMT

2014/02/26 -- Nat Sakimura

Re: [security] OIC self-issued mode is insecure

Wed, 26 Feb 2014 00:49:29 GMT

2014/02/26 -- Manger, James

Re: [security] OIC self-issued mode is insecure

Tue, 25 Feb 2014 08:33:27 GMT

2014/02/25 -- Mike Jones

[security] OIC self-issued mode is insecure

Tue, 25 Feb 2014 06:59:24 GMT

2014/02/25 -- Manger, James

[security] python-openid / XXE ?

Tue, 28 Jan 2014 16:53:24 GMT

2014/01/28 -- romanvinohradsky

Re: [security] OpenID identity leaks

Thu, 02 Jan 2014 10:18:26 GMT

2014/01/02 -- Andris Atteka

Re: [security] OpenID identity leaks

Mon, 30 Dec 2013 23:00:35 GMT

2013/12/30 -- Jacob Bellamy

Re: [security] OpenID identity leaks

Mon, 30 Dec 2013 21:37:05 GMT

2013/12/30 -- John Bradley

Re: [security] OpenID identity leaks

Mon, 30 Dec 2013 20:22:42 GMT

2013/12/30 -- Andrew Arnott

Re: [security] OpenID identity leaks

Mon, 30 Dec 2013 20:08:46 GMT

2013/12/30 -- Jacob Bellamy

Re: [security] OpenID identity leaks

Mon, 30 Dec 2013 14:12:41 GMT

2013/12/30 -- Andris Atteka

Re: [security] OpenID identity leaks

Wed, 25 Dec 2013 22:01:31 GMT

2013/12/25 -- Johnny Bufu

Re: [security] OpenID identity leaks

Sat, 21 Dec 2013 10:36:37 GMT

2013/12/21 -- Andris Atteka

Re: [security] OpenID identity leaks

Sat, 21 Dec 2013 10:11:11 GMT

2013/12/21 -- Bart van Delft

[security] OpenID identity leaks

Sat, 21 Dec 2013 09:13:15 GMT

2013/12/21 -- Andris Atteka

[security] (no subject)

Sat, 23 Nov 2013 21:30:28 GMT

2013/11/23 -- Alvin Santiago

Re: [security] Unsolicited assertion security vulnerability?

Sat, 27 Oct 2012 03:14:14 GMT

2012/10/27 -- John Bradley

Re: [security] Unsolicited assertion security vulnerability?

Sat, 27 Oct 2012 02:32:10 GMT

2012/10/27 -- Andrew Arnott

Re: [security] Unsolicited assertion security vulnerability?

Sat, 27 Oct 2012 01:41:16 GMT

2012/10/27 -- John Bradley

[security] Unsolicited assertion security vulnerability?

Sat, 27 Oct 2012 00:16:54 GMT

2012/10/27 -- Andrew Arnott

Re: [security] AX Security in python-openid

Fri, 27 Jul 2012 17:52:35 GMT

2012/07/27 -- John Bradley

Re: [security] AX Security in python-openid

Fri, 27 Jul 2012 17:43:30 GMT

2012/07/27 -- Nat Sakimura

[security] AX Security in python-openid

Fri, 27 Jul 2012 01:55:02 GMT

2012/07/27 -- Mike Sun

[security] XSRF and unsolicited assertions

Thu, 05 Jul 2012 13:56:58 GMT

2012/07/05 -- Andrew Arnott

Re: [security] Logout

Fri, 06 May 2011 13:42:55 GMT

2011/05/06 -- John Bradley

Re: [security] Logout

Fri, 06 May 2011 10:58:27 GMT

2011/05/06 -- Jacob Bellamy

Re: [security] Logout

Thu, 05 May 2011 15:48:11 GMT

2011/05/05 -- Nat Sakimura

[security] Logout

Wed, 04 May 2011 18:40:57 GMT

2011/05/04 -- Sylvain Gilbert

[security] Email addresses as primary identifiers, and unsolicited assertions

Thu, 21 Apr 2011 14:37:42 GMT

2011/04/21 -- Andrew Arnott

Re: [security] SL comprimise

Thu, 31 Mar 2011 02:20:10 GMT

2011/03/31 -- James A. Donald

Re: [security] SL comprimise

Thu, 31 Mar 2011 02:15:27 GMT

2011/03/31 -- SitG Admin

Re: [security] SL comprimise

Thu, 31 Mar 2011 01:09:49 GMT

2011/03/31 -- James A. Donald

Re: [security] SL comprimise

Wed, 30 Mar 2011 22:05:19 GMT

2011/03/30 -- Eddy Nigg (StartCom Ltd.)

Re: [security] SL comprimise

Wed, 30 Mar 2011 21:34:11 GMT

2011/03/30 -- John Bradley

Re: [security] SL comprimise

Wed, 30 Mar 2011 21:13:42 GMT

2011/03/30 -- Eddy Nigg (StartCom Ltd.)

Re: [security] SL comprimise

Wed, 30 Mar 2011 19:59:33 GMT

2011/03/30 -- John Bradley

Re: [security] SL comprimise

Wed, 30 Mar 2011 18:40:57 GMT

2011/03/30 -- Kurt Seifried

Re: [security] SL comprimise

Sat, 26 Mar 2011 17:01:42 GMT

2011/03/26 -- John Bradley

Re: [security] SL comprimise

Sat, 26 Mar 2011 02:02:41 GMT

2011/03/26 -- SitG Admin

Re: [security] SL comprimise

Fri, 25 Mar 2011 21:49:10 GMT

2011/03/25 -- John Bradley

Re: [security] SL comprimise

Fri, 25 Mar 2011 21:12:56 GMT

2011/03/25 -- John Bradley

Re: [security] SL comprimise

Fri, 25 Mar 2011 20:43:27 GMT

2011/03/25 -- Kurt Seifried

Re: [security] SL comprimise

Fri, 25 Mar 2011 20:26:37 GMT

2011/03/25 -- SitG Admin

Re: [security] SL comprimise

Fri, 25 Mar 2011 20:03:38 GMT

2011/03/25 -- John Bradley

Re: [security] SL comprimise

Fri, 25 Mar 2011 12:34:20 GMT

2011/03/25 -- John Bradley

Re: [security] SL comprimise

Fri, 25 Mar 2011 10:29:39 GMT

2011/03/25 -- Ben Laurie

Re: [security] SL comprimise

Fri, 25 Mar 2011 00:29:05 GMT

2011/03/25 -- John Bradley

Re: [security] SL comprimise

Thu, 24 Mar 2011 19:32:59 GMT

2011/03/24 -- John Bradley

Re: [security] SL comprimise

Thu, 24 Mar 2011 19:27:56 GMT

2011/03/24 -- Andrew Arnott

Re: [security] SL comprimise

Thu, 24 Mar 2011 17:20:16 GMT

2011/03/24 -- John Bradley

Re: [security] SL comprimise

Thu, 24 Mar 2011 17:08:10 GMT

2011/03/24 -- Mike Hanson

Re: [security] SL comprimise

Thu, 24 Mar 2011 17:07:05 GMT

2011/03/24 -- Phillip Hallam-Baker

Re: [security] SL comprimise

Thu, 24 Mar 2011 16:48:29 GMT

2011/03/24 -- Mike Hanson

[security] SL comprimise

Thu, 24 Mar 2011 14:10:00 GMT

2011/03/24 -- John Bradley

[security] Женская логика

Thu, 02 Dec 2010 20:24:04 GMT

2010/12/02 -- Vovan

[security] Пикап

Thu, 02 Dec 2010 16:01:07 GMT

2010/12/02 -- Vovan

[security] Пикап

Thu, 02 Dec 2010 15:55:17 GMT

2010/12/02 -- Vovan

[security] Пикап

Thu, 02 Dec 2010 15:49:13 GMT

2010/12/02 -- Vovan

[security] Пикап

Thu, 02 Dec 2010 15:37:22 GMT

2010/12/02 -- Vovan

[security] PAPE max_auth_age vs. policies

Fri, 17 Sep 2010 13:44:46 GMT

2010/09/17 -- Vlastimil Zíma

Re: [security] Widespread Timing Vulnerabilities in OpenID implementations

Sat, 17 Jul 2010 21:01:24 GMT

2010/07/17 -- Phillip Hallam-Baker

Re: [security] Widespread Timing Vulnerabilities in OpenID implementations

Sat, 17 Jul 2010 15:39:52 GMT

2010/07/17 -- Nate Lawson

Re: [security] Widespread Timing Vulnerabilities in OpenID implementations

Sat, 17 Jul 2010 07:20:34 GMT

2010/07/17 -- James A. Donald

Re: [security] Widespread Timing Vulnerabilities in OpenID implementations

Sat, 17 Jul 2010 03:50:47 GMT

2010/07/17 -- Andrew Arnott

Re: [security] Widespread Timing Vulnerabilities in OpenID implementations

Sat, 17 Jul 2010 03:28:03 GMT

2010/07/17 -- James A. Donald

Re: [security] Widespread Timing Vulnerabilities in OpenID implementations

Fri, 16 Jul 2010 23:05:15 GMT

2010/07/16 -- Nate Lawson

Re: [security] Widespread Timing Vulnerabilities in OpenID implementations

Fri, 16 Jul 2010 22:19:45 GMT

2010/07/16 -- Andrew Arnott

Re: [security] Widespread Timing Vulnerabilities in OpenID implementations

Fri, 16 Jul 2010 18:19:44 GMT

2010/07/16 -- Nate Lawson

Re: [security] Widespread Timing Vulnerabilities in OpenID implementations

Fri, 16 Jul 2010 18:18:09 GMT

2010/07/16 -- Pádraic Brady

Re: [security] Widespread Timing Vulnerabilities in OpenID implementations

Fri, 16 Jul 2010 18:12:36 GMT

2010/07/16 -- Bob Wyman

Re: [security] Widespread Timing Vulnerabilities in OpenID implementations

Fri, 16 Jul 2010 18:10:38 GMT

2010/07/16 -- Pádraic Brady

Re: [security] Widespread Timing Vulnerabilities in OpenID implementations

Fri, 16 Jul 2010 18:02:25 GMT

2010/07/16 -- Phillip Hallam-Baker

Re: [security] Widespread Timing Vulnerabilities in OpenID implementations

Fri, 16 Jul 2010 17:46:25 GMT

2010/07/16 -- Nate Lawson

Re: [security] Widespread Timing Vulnerabilities in OpenID implementations

Fri, 16 Jul 2010 16:41:59 GMT

2010/07/16 -- Breno de Medeiros

Re: [security] Widespread Timing Vulnerabilities in OpenID implementations

Fri, 16 Jul 2010 15:02:32 GMT

2010/07/16 -- Pádraic Brady