Re: Replay attacks with cookie session

Wayne E. Seguin
2007-03-24T21:42:10Z

I have a question on this discussion.

Would using Ajax requests throw a wrench into the works?

The example I''m thinking of is:

1. Request 1 hits the server invalidating the nonce for the session,
and runs for a bit

2. Request 2 comes in and gets rejected, hence the request fails and
something expected to happen doesn''t

3. Request 1 completes and a new session cookie is set so that the
next action completes successfully.

Thanks,

   ~Wayne