tree e6a5f16f0ff02811a7266ee937bbd5f4d48fd97e
parent e6744204e5fb754c3290497aebaf32f7e11d779c
author Eric Anderson <ejona@google.com> 1369960553 -0700
committer Eric Anderson <ejona@google.com> 1369961979 -0700

Swap Authenticator to host+IP whitelist

The Authenticator we use has a whitelist. Previously that whitelist was
a list of URLs, which is very suboptimal (and only worked by chance for
attachments). Now we simply observe the host and IP and make sure they
are what we expect.