From 7d9778c6024bf7641f2868026779e42017db7c48 Mon Sep 17 00:00:00 2001 From: Christoph Burschka Date: Wed, 15 Jan 2014 23:52:05 +0100 Subject: Formatting of README headings. --- plugins/session/README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/plugins/session/README.md b/plugins/session/README.md index cc246d9..9c931cb 100644 --- a/plugins/session/README.md +++ b/plugins/session/README.md @@ -23,8 +23,9 @@ The control flow is like this: If it exists and hasn't expired yet, it confirms the authentication and the user is logged in without a password. + Security Considerations -======================= +----------------------- The one-time key is transmitted in clear, and can be intercepted if the connection is not encrypted. But the same channel is already used to transmit the password -- cgit v1.1