Open Access News

News from the open access movement


Friday, March 21, 2003

More on the JSTOR theft....JSTOR is abandoning the insecure method of IP authentication that made the theft possible, and that most other publishers of priced ejournals still prefer. It is turning to Shibboleth to authenticate users, a new method developed for the Internet2 consortium. Shibboleth uses a digital token stored in the user's browser. The tokens are sophisticated variations on cookies that take information from the university's directory server and tell the journal server what level of access is authorized.