I'm requesting access to either co-maintain or take over the development of this module.

"Encryption" functions do not actually encrypt, exposing private data to the world

and

Security issue: Create users with chosen roles.

are two major outstanding security flaws with the former not being noted on the module page. I'd like to assist as much as I can in exploring if this approach can work and be secure. I've noticed that the module maintainer hasn't been active recently and have also contacted him without response.

I'm posting this in response to the guidelines at Dealing with unsupported (abandoned) projects.

Comments

ryan.gibson’s picture

ryan.gibson CreditAttribution: ryan.gibson at Mediacurrent commented
Project: Single Sign On Multiple Domain » Drupal.org project ownership
Version: 7.x-1.0-alpha1 »
Component: Miscellaneous » Ownership transfer

Moving issue as instructed by instructions for Dealing with unsupported (abandoned) projects.

I contacted the module maintainer through the drupal.org contact form on July 20, and haven't heard a response from him. His profile hasn't been updated recently.

Project Single Sign On Multiple Domain

Reason As mentioned above, there are outstanding security issues that we would like to address in a new update.

dddave’s picture

dddave CreditAttribution: dddave commented
Related issues: +#2361529: "Encryption" functions do not actually encrypt, exposing private data to the world

Maintainer was active in the queue and I have pointed him here. If there is no response this week, please ping this issue.

ryan.gibson’s picture

ryan.gibson CreditAttribution: ryan.gibson at Mediacurrent commented
Status: Active » Closed (fixed)

Update
Due to the severity of the security issues and based on the recommendation by greggles in the related issue, I'm withdrawing my co-maintainer request.

varunmishra2006’s picture

varunmishra2006 CreditAttribution: varunmishra2006 commented

@dddave

Are you interested in co-maintainership?