Re: Replay attacks with cookie session

Sam Bravard
2007-03-29T08:22:54Z

Someone on Caboose want to chime in and bring this thread to rest?

Short summary: someone made a well meaning change to sessions that is
broken and creates more pain than it solves.
Desired result: rollback the patch.

DHH, what say you?

On Mar 29, 12:02 am, Thijs van der Vossen <t.vandervos...@gmail.com>
wrote:
> On Mar 29, 2007, at 3:48, Brad Ediger wrote:
>
> > On Mar 27, 2007, at 9:46 PM, S. Robert James wrote:
> >> As I said earlier, I''m waiting for a spec and sample app
before
> >> working on a full review.
>
> > I went ahead and wrote up a spec. Here''s my first crack at
it.
>
> > Everyone: Please feel free to make suggestions / corrections.
>
> I''m probably missing something here, but what exactly is your goal
> for this?
>
> Kind regards,
> Thijs
>
> --
> Fingertips -http://www.fngtps.com