Re: Replay attacks with cookie session

Brad Ediger
2007-03-25T22:10:17Z

On Mar 25, 2007, at 4:12 PM, S. Robert James wrote:

> Koz asked me to try to get a professional review done.  To do this, I
> need two things (preferably
> from core):
>
> 1. A short but precise spec on how the cookie sessions work. The
> people doing the review may never have seen a line of Ruby in their
> lives.  The spec should be specific and technical, just not assume
> knowledge of Ruby.  It should also be brief, if we want anyone to go
> over it pro bono.

I would be willing to draft a spec if the core team is too busy. We
could always run it by them for editing / approval.

be