[DesDev] What's next?

[Isaac Forman]

> I don't think that anything was ever settled.  However, IIRC, 
> the stumbling block was m.e.o.  The authentication and 
> authorization information would be exposed to the m.e.o 
> membership at large.
> 
> I think that we wanted a way of allowing members to use 
> member credentials but not have the details given to them 
> which would compromise security.
> 
> Obviously, since m.e.o is no longer an issue, designing 
> something should be a little easier.

That's good news.

So, given that we are likely to run a number of sub-sites on servers not
located on the same immediate network, using varying backend
applications, the SSO is achievable.

Using what? Cookies?


isaac