[wp-trac] [WordPress Trac] #25810: Add nonce to wp-login.php

[WordPress Trac]

#25810: Add nonce to wp-login.php
-----------------------------+------------------------------
 Reporter:  strangerstudios  |       Owner:
     Type:  enhancement      |      Status:  new
 Priority:  normal           |   Milestone:  Awaiting Review
Component:  Security         |     Version:
 Severity:  normal           |  Resolution:
 Keywords:  dev-feedback     |
-----------------------------+------------------------------

Comment (by alexvorn2):

 I don't this will help ( a lot ) against automated log in.
 As I imagine a automated log in is made with a script created with a
 browser module that simulates a regular browser ex: IE 8 or Firefox 17, so
 nonce will show up in the source and will not affect the automated log in.

 Does google or facebook use such type of security like nonce on their log
 in page?

--
Ticket URL: <http://core.trac.wordpress.org/ticket/25810#comment:1>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software