[Bug 978961] [NEW] add release note that OpenStack should be used on a protected network

[Jamie Strandboge]

*** This bug is a duplicate of bug 978963 ***
    https://bugs.launchpad.net/bugs/978963

Public bug reported:

Much of OpenStack is hard-coded to use http instead of https. Of particular interest is keystone which is the identity service for OpenStack. https://wiki.ubuntu.com/PrecisePangolin/ReleaseNotes/UbuntuCloud should state that accessing OpenStack over an unprotected network may expose credentials and other information. This is true (at least) when:
* keystone is on a separate server from the other OpenStack components
* horizon (the OpenStack Dashboard) is on a different system than keystone
* users access OpenStack remotely

Adding horizon and keystone tasks.

** Affects: horizon (Ubuntu)
     Importance: High
         Status: Triaged

** Affects: keystone (Ubuntu)
     Importance: High
         Status: Triaged

** Affects: horizon (Ubuntu Precise)
     Importance: High
         Status: Triaged

** Affects: keystone (Ubuntu Precise)
     Importance: High
         Status: Triaged


** Tags: rls-p-tracking

** Also affects: horizon (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: keystone (Ubuntu)
   Importance: Undecided
       Status: New

** Changed in: keystone (Ubuntu Precise)
       Status: New => Triaged

** Changed in: horizon (Ubuntu Precise)
       Status: New => Triaged

** Changed in: keystone (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: horizon (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: keystone (Ubuntu Precise)
    Milestone: None => ubuntu-12.04

** Changed in: horizon (Ubuntu Precise)
    Milestone: None => ubuntu-12.04

** Tags added: rls-p-tracking

** This bug has been marked a duplicate of bug 978963
   add release note that OpenStack should be used on a protected network

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to horizon in Ubuntu.
https://bugs.launchpad.net/bugs/978961

Title:
  add release note that OpenStack should be used on a protected network

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/horizon/+bug/978961/+subscriptions