[Search-l] single sign-on (was Re: Browser Test)

[Jimmy Wales]

jer wrote:
> Unfortunately the single-sign-on only works if you check the box to  
> save the password, that gives permission to store another token  
> cookie that will auto-login on both the wiki and social side.

Shouldn't that just be the default?  Like, have the checkbox on by 
default, and you have to uncheck it?  Or, the same thing, have it says 
"I am on a public computer" and have it be unchecked by default?

What do other major sites do?

> There's no easy way to access the local "sessions" in either side, so  
> single-sign-on has to be explicit with the user choosing that option  
> for now.

I understand about the local session cookies being hard to access on 
either side, but why not have the auto-login token be set whether you 
check the box or not, just as a session-expiring cookie?

--Jimbo