Re: Can we change auto-logout timing on wiki.postgresql.org?

From: Stefan Kaltenbrunner <stefan(at)kaltenbrunner(dot)cc>
To: "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>
Cc: Paul Waring <paul(at)xk7(dot)net>, pgsql-www(at)postgresql(dot)org
Subject: Re: Can we change auto-logout timing on wiki.postgresql.org?
Date: 2013-04-27 09:10:43
Message-ID: 517B9613.4090201@kaltenbrunner.cc
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-www

On 04/27/2013 08:55 AM, Joshua D. Drake wrote:
>
> On 04/26/2013 11:39 PM, Stefan Kaltenbrunner wrote:
>
>> interesting hint - thanks.
>>
>> I have now increased the relevant timeouts to 6h - lets see how that
>> goes..
>
> FTR, I don't think we should autologout people or at least it should be
> set to something like 7D.

well from a security perspective it is usually advisable to keep session
lifetimes as short as possible, I agree that the current setup was way
to aggressive, but 6h already results in a 6-15x increase of what we had
before. We can always adjust upwards if we people are really working 6h+
on an article but lets see first if this change really fixes the issue
berkus complained about.

Stefan

In response to

Responses

Browse pgsql-www by date

  From Date Subject
Next Message Bruce Momjian 2013-04-27 14:09:14 Re: Can we change auto-logout timing on wiki.postgresql.org?
Previous Message Joshua D. Drake 2013-04-27 06:55:20 Re: Can we change auto-logout timing on wiki.postgresql.org?