Comment 39 for bug 1434034

Revision history for this message
Brant Knudson (blk-u) wrote : Re: Even if the user is disabled, can use the last token is validated

I'm concerned about issuing an advisory for something we're not going to fix. If we can't fix this for PKI tokens or federated users then we're saying these features are inherently insecure.