Comment 14 for bug 1372635

Matt, let me make a suggestion here. We are all aware that there are weaknesses in security here, as is mentioned above. Unfortunately there is often a great focus on putting new features in place and fixing obvious bugs in functionality over addressing these weaknesses. As a result, it can be harder to get resource to focus on these weaknesses.

You clearly have a passion for these sorts of issues, you are finding them and wish to see them fixed. In Kilo we are going to be focusing, in Cinder, on cleaning up and improving base Cinder. This would be a good opportunity to start fixing these issues. If you want to start building up a list of areas that security could be improved in Cinder we would more than welcome any patches you wish to submit to address those issues.