Standalone CookieCrumbler is not generating http-only cookies. With PAS you can handle stuff like password strength and renewal strategies or account locking in a pluggable way. Read docs on pypi and http://plone.org/documentation/kb/securing-plone
--- Ursprüngl. Mitteilung --- Von:Richard Harley Gesend.: 02.02.2012, 23:57 An: Shane Hathaway Cc: zope@zope.org Betreff:Re: [Zope] CookieCrumbler, any new versions or replacement? What is the main advantage of PAS over cookie crumbler over SSL out of interest? Cheers Rich On 2 Feb 2012, at 21:57, Shane Hathaway <sh...@hathawaymix.org> wrote: > On 02/02/2012 10:46 AM, Hugo Ramos wrote: >> I need to reuse a web application I developed around 2005/2006. This >> App was using CookieCrumbler as it's only authentication method but it >> seems that after zope 2.11.x the product is broken as it has a few >> imports from deprecated classes. >> >> Anyone knows about CookieCrumbler versions above 1.2 or some other >> replacement for this product? > > Zope's pluggable authentication service replaces it. > > Shane > _______________________________________________ > Zope maillist - Zope@zope.org > https://mail.zope.org/mailman/listinfo/zope > ** No cross posts or HTML encoding! ** > (Related lists - > https://mail.zope.org/mailman/listinfo/zope-announce > https://mail.zope.org/mailman/listinfo/zope-dev ) _______________________________________________ Zope maillist - Zope@zope.org https://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - https://mail.zope.org/mailman/listinfo/zope-announce https://mail.zope.org/mailman/listinfo/zope-dev ) _______________________________________________ Zope maillist - Zope@zope.org https://mail.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - https://mail.zope.org/mailman/listinfo/zope-announce https://mail.zope.org/mailman/listinfo/zope-dev )