Re: Replay attacks with cookie session

Obie Fernandez
2007-03-29T14:56:22Z

On 3/29/07, Tomas Jogin <tomasj@gmail.com> wrote:
>
> How about just NOT changing the default setting to this less secure
> option? Problem solved.

+ 1  It sounds like the decision to make cookie store the default was
premature, at best.

By the way, just because this ''feature'' is in EdgeRails does
not mean
it will make it to a *stable* release, which makes some of the
hand-wringing on periphery of this thread seem a little premature
also.