Re: Replay attacks with cookie session

Jeremy Kemper
2007-03-29T19:35:27Z

On 3/29/07, Obie Fernandez <obiefernandez@gmail.com>
wrote:
> On 3/29/07, Tomas Jogin <tomasj@gmail.com> wrote:
> > How about just NOT changing the default setting to this less secure
> > option? Problem solved.
>
> + 1  It sounds like the decision to make cookie store the default was
> premature, at best.

Planting the seed here led to quick ripening and plenty of pesticide.

> By the way, just because this ''feature'' is in EdgeRails
does not mean
> it will make it to a *stable* release, which makes some of the
> hand-wringing on periphery of this thread seem a little premature
> also.

Thanks for the fish, all.

jeremy