Re: Replay attacks with cookie session

Andreas Schwarz
2007-03-25T16:52:33Z

On 24 Mrz., 18:55, "Sam Bravard" <sam.brav...@gmail.com>
wrote:
> What is so broken that requires all of this messy overhead and limitations?

I agree with your view. Storing session data in cookies is a bad idea,
even if correctly implemented with a nonce. But the current
implementation in Rails is just outright dangerous and should be
removed.

Andreas