Re: Replay attacks with cookie session

Jonathan Weiss
2007-03-27T19:53:43Z

> I believe that CookieStore should be either (1) secure against replay
> attacks by default, or (2) not the default session store. Anything
> else is asking too much of non-security-aware developers.

+ 1

Jonathan


--
Jonathan Weiss