> > machine. (even on my desktop, other people in the network can log in
> > in principle)
>
> You're right -- anybody could access the notebook even locally.
> That is already a serious security issue.  Probably the best thing
> to do is make it so you have to login, but make it very easy
> to have the browser automatically remember your password, so
> you only log in once.


How do I find out what a user's ip address is? Many if localhost identifies
itself as 127.0.0.1 when contacting the notebook then maybe we could just
solve this problem by restricting to that. It appears that when I go to
https://localhost:8001 and make a worksheet I see the ip address
127.0.0.1in the log, so I think we may be able to restrict access to
localhost.

--~--~---------~--~----~------------~-------~--~----~
To post to this group, send email to sage-devel@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at http://groups.google.com/group/sage-devel
URLs: http://sage.scipy.org/sage/ and http://modular.math.washington.edu/sage/
-~----------~----~----~----~------~----~------~--~---

Reply via email to