openid/python-openid

Timing attack vulnerability

brimcfadden opened this issue · 1 comments

http://lists.openid.net/pipermail/openid-security/2010-July/001156.html

The line mentioned is in associations.py, line 535.

A good fix is discussed here.

Looks like somebody fixed it.