Re: Replay attacks with cookie session

Courtenay
2007-03-22T18:53:21Z

On 3/22/07, S. Robert James <srobertjames@gmail.com>
wrote:
> On Mar 22, 10:44 am, Brad Ediger <b...@bradediger.com> wrote:
> Now, I click "Log Out", and get up from the library''s
computer, only
> to let the person waiting after me to retrieve the old cookie.... That
> innocuous user id just became both sensitive and transient.

You click ''log out'' and it deletes the cookie.
This is no different to a normal server-based session.

court3nay