...Actually it is admin.fedoraprojet.org that will ask for the password.
I assumed that if username.id.fedoraproject.org is used as OpenID ID,
there would be some plain HTTP request from the user's browser to
username.id.fedoraproject.org, but this does not seem to be the case
(anymore?).
Nevertheless, at least trac will probably not connect via
HTTPS to username.id.fedoraproject.org, because the certificate for that
host name is not valid.
Nevertheless, an attack might not be that likely
for that as as MITM attacks near a user's client are.
Regards
Till
_______________________________________________
infrastructure mailing list
infrastructure@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/infrastructure