? assoc_expire_description.patch
Index: openid_provider.module
===================================================================
RCS file: /cvs/drupal-contrib/contributions/modules/openid_provider/openid_provider.module,v
retrieving revision 1.3.2.1
diff -u -p -r1.3.2.1 openid_provider.module
--- openid_provider.module	21 Feb 2009 03:39:29 -0000	1.3.2.1
+++ openid_provider.module	7 Mar 2009 15:48:13 -0000
@@ -109,7 +109,9 @@ function openid_provider_admin_settings(
     '#title' => t('Associations expire in this many seconds'),
     '#default_value' => variable_get('openid_provider_assoc_expires_in', '3600'),
     '#size' => 10,
-    '#maxlength' => 10);
+    '#maxlength' => 10,
+    '#description' => t('This value is related to security. If an attacker gets the generated SHA1 and brute force it, he can do a man-in-the-middle attack. But brute force takes so long time, that in practice, the attack cannot be done. ') . l(t('Read more here'), 'http://openid.net/pipermail/security/2007-February/000237.html'),
+  );
   return system_settings_form($form);
 }