Firefox 3.0.7, Diigolet 3.1b508, diigoandlogincookie, https://secure.diigo.com/ and toolbar3.diigo.com:80 - 30 views

• 
  #1 Graham Perrin on 26 Mar 09

   

  Spun off from Diigolet: Sign in and continuing effectiveness *without* third party cookies:
  
  > use https://secure.diigo.com/sign-in to sign in
  
  > This approach to Diigolet 3.1b508 is apparently not
  > compatible with Mozilla Firefox 3.0.7 on Mac OS X 10.5.6 or
  > Windows XP.
  
  > I see a relevant cookie diigoandlogincookie valid for a
  > very respectable period.
  
  @ Diigo
  
  1. Is there a bug in Mozilla that limits compatibility with cookies of this type?
  
  Or is the limitation by design, in the security model of Mozilla?
  
  2. Cross reference http://groups.diigo.com/Diigo_HQ/forum/topic/43061 with a focus on port 80 (presumably without SSL), might compatibility be improved if the authentication service used for Diigolet is harmonised with the secure service(s) at/around https://secure.diigo.com/sign-in ?
  
  Personally, no rush for answers at this busy time. Simple curiosity.
  
  TIA
  Graham

   

  <div class="cArrow"> </div><div class="cContentInner">Spun off from <a href="http://groups.diigo.com/Diigo_HQ/forum/topic/diigolet-sign-in-and-continuing-effectiveness-without-third-party-cookies-43081#1" rel="nofollow">Diigolet: Sign in and continuing effectiveness *without* third party cookies</a>: <br /> <br /> > use <a target="_blank" href="https://secure.diigo.com/sign-in" rel="nofollow">https://secure.diigo.com/sign-in</a> to sign in <br /> <br /> > This approach to Diigolet 3.1b508 is apparently <b>not</b> <br /> > compatible with Mozilla Firefox 3.0.7 on Mac OS X 10.5.6 or <br /> > Windows XP. <br /> <br /> > I see a relevant cookie <i>diigoandlogincookie</i> valid for a <br /> > very respectable period. <br /> <br /> @ Diigo <br /> <br /> 1. Is there a bug in Mozilla that limits compatibility with cookies of this type? <br /> <br /> Or is the limitation by design, in the security model of Mozilla? <br /> <br /> 2. Cross reference <a target="_blank" href="http://groups.diigo.com/Diigo_HQ/forum/topic/43061" rel="nofollow">http://groups.diigo.com/Diigo_HQ/forum/topic/43061</a> with a focus on <b>port 80 (presumably without SSL)</b>, <i>might</i> compatibility be improved <i>if</i> the authentication service used for Diigolet is harmonised with the secure service(s) at/around <a target="_blank" href="https://secure.diigo.com/sign-in" rel="nofollow">https://secure.diigo.com/sign-in</a> ? <br /> <br /> Personally, no rush for answers at this busy time. Simple curiosity. <br /> <br /> TIA <br /> Graham</div>

  ...

  Cancel

To Top