Re: Replay attacks with cookie session

Brad Ediger
2007-03-29T14:51:04Z

On Mar 29, 2007, at 2:02 AM, Thijs van der Vossen wrote:

>
> On Mar 29, 2007, at 3:48, Brad Ediger wrote:
>> On Mar 27, 2007, at 9:46 PM, S. Robert James wrote:
>>> As I said earlier, I''m waiting for a spec and sample app
before
>>> working on a full review.
>>
>> I went ahead and wrote up a spec. Here''s my first crack at it.
>>
>> Everyone: Please feel free to make suggestions / corrections.
>
> I''m probably missing something here, but what exactly is your goal
> for this?

Koz asked for a security review, Robert James said he might be able
to get one, so I wrote a summary of what has been said / done so far.
I was trying to be neutral but detailed, so that''s why it might seem
bland.

--be