Re: Replay attacks with cookie session

Alexey Verkhovsky
2007-03-27T16:05:56Z

+1 to:

CookieStore should be either (1) secure against replay
> attacks by default, or (2) not the default session store. Anything
> else is asking too much of non-security-aware developers.