3 ms·

and all of that is even more useless if your session token is short/weak/easy to guess

• tptacek 17y ago
  If you even have to think about what your session token is, you've done things dramatically wrong.