launchpad support for vhosts

[Dustin Kirkland ]

Launchpad.net does not currently support vhosts.

The QEMU project would like to set http://bugs.qemu.org to serve as a front end to http://bugs.launchpad.net/qemu.

I think this would be an excellent feature. Several blog hosting services, such as Blogger.com and Wordpress.com support this. This would help Launchpad.net attract more projects, without those projects deploying their own launchpad instances in their domain.

:-Dustin

[William Grant (wgrant)]

Wouldn't this open up a huge cookie leaking vulnerability?

[Anthony Liguori (anthony-codemonkey)]

I think that depends on how it's implemented. If you log into launchpad via bugs.qemu.org, you wouldn't be able to access bugs.launchpad.net without logging in again. You couldn't share cookies between the two.

[Tim Penhey (thumper)]

This has been talked about on the Launchpad team. Everyone agrees it is a good idea, but not yet sure on how it is going to be implemented or when it will be done.

[Gary Poster (gary)]

A recent excerpt from Stuart Bishop on this topic:

"""
The reason we currently have https://bugs.launchpad.net/ubuntu instead
of http://bugs.ubuntu.com is authentication. We always wanted product
specific domains, defaulting to foo.launchpad.net and allowing people
to use their own domains. Unfortunately, OpenID didn't exist at that
time and we didn't want to invent it ourselves.

...

The real solution depends on Launchpad becoming an OpenID consumer. We
can then stop requiring a cookie to be shared across all the domains.
This gives us Launchpad over HTTP for a big perceived speedup, fewer
security concerns with session cookies, and the ability to host 3rd
party domains.
"""

We do have plans to become an OpenID consumer.