Ideas

Login Cookie Persistence Length Per Protection Profile

Note You are not authorized to edit this feature.

10

Login To Vote

Login Cookie Persistence Length Per Protection Profile

Security

The OWASP recommends very short session timeouts for apps with critical data. Users with an Extreme Protection profile are typical internal users (staff/volunteers) who have access to far more data then the congregant who only has access to just their family's data. In light of this it would be important to allow configuring Login Cookie Persistence Length based on a user's protection profile. The default value of 30 days is great for users with limited access to data, but it greatly exceeds the OWASP recommendation for users with access to sensitive data.

Photo of Tony ViscontiSubmitted by Tony Visconti, College Church (Wheaton)  ·   ·  Security
Remove Votes
Login to add a comment...

Submission Success Tips

Cultivate your ideas for maximum impact with these helpful submission tips that will increase the chances of your brilliant concepts becoming reality.

  • Clear Title: Craft a straightforward and descriptive title that instantly conveys the essence of your idea.
  • Concise Description: Provide an idea description that is succinct, ensuring it effectively communicates the concept without unnecessary verbosity.
  • Provide Additional Details: With a concise description complete, now provide any other details that are needed to better understand the requirements.
  • Thorough Ministry Need Review: Provide a comprehensive overview of the ministry need your idea addresses, emphasizing its significance.
  • Cover the WHY: Clearly articulate the rationale behind your idea, explaining why it's essential and how it aligns with the organization's goals and mission. Oftentimes a clear "why" sheds light into other possible options.