Latest version: v2.3
Repoze.who 2.0b1 includes a fix to prevent timing-based attacks again…
Repoze.who 2.0a4 fixes 'auth_tkt' plugin to add "secure" and "HttpOnl…