Launchpad itself

launchpad support for vhosts

Bug #392266 reported by Dustin Kirkland 
16
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Launchpad itself
Triaged
Low
Unassigned

Bug Description

Launchpad.net does not currently support vhosts.

The QEMU project would like to set http://bugs.qemu.org to serve as a front end to http://bugs.launchpad.net/qemu.

I think this would be an excellent feature. Several blog hosting services, such as Blogger.com and Wordpress.com support this. This would help Launchpad.net attract more projects, without those projects deploying their own launchpad instances in their domain.

:-Dustin

Revision history for this message
William Grant (wgrant) wrote :

Wouldn't this open up a huge cookie leaking vulnerability?

Revision history for this message
Anthony Liguori (anthony-codemonkey) wrote :

I think that depends on how it's implemented. If you log into launchpad via bugs.qemu.org, you wouldn't be able to access bugs.launchpad.net without logging in again. You couldn't share cookies between the two.

Revision history for this message
Tim Penhey (thumper) wrote :

This has been talked about on the Launchpad team. Everyone agrees it is a good idea, but not yet sure on how it is going to be implemented or when it will be done.

Diogo Matsubara (matsubara)
affects: launchpad → launchpad-foundations
Changed in launchpad-foundations:
importance: Undecided → Low
summary: - wishlist: launchpad support for vhosts
+ launchpad support for vhosts
tags: added: feature
Revision history for this message
Gary Poster (gary) wrote :

A recent excerpt from Stuart Bishop on this topic:

"""
The reason we currently have https://bugs.launchpad.net/ubuntu instead
of http://bugs.ubuntu.com is authentication. We always wanted product
specific domains, defaulting to foo.launchpad.net and allowing people
to use their own domains. Unfortunately, OpenID didn't exist at that
time and we didn't want to invent it ourselves.

...

The real solution depends on Launchpad becoming an OpenID consumer. We
can then stop requiring a cookie to be shared across all the domains.
This gives us Launchpad over HTTP for a big perceived speedup, fewer
security concerns with session cookies, and the ability to host 3rd
party domains.
"""

We do have plans to become an OpenID consumer.

Changed in launchpad-foundations:
status: New → Triaged
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Related questions

Remote bug watches

Bug watches keep track of this bug in other bug trackers.