Re: Replay attacks with cookie session

Manfred Stienstra
2007-03-22T07:26:35Z

On Mar 21, 2007, at 11:08 PM, Preston Lee wrote:

> I''m neither a Rails nor cryptography expert, but the threat of
> session hijacking is a very important issue

It''s an important issue when you''re trying to have a secure
session.
When you''re just using the session for some flash variables I
don''t
see the point in using an overly secure session system.

I think we should document the various session stores very well and
tell people what to use in which circumstances.

Developers aren''t small children, we don''t have to make their
decisions for them.

Manfred