4 ms·
That is very helpful information. I am surprised it had JS, I would have to read why. Cookies are still harmful if no JS?
by cjhanks 10y ago
That is very helpful information. I am surprised it had JS, I would have to read why.
Cookies are still harmful if no JS?
- danjoc 10y agoI consider cookies much more secure than the alternatives. Here's a detailed explanation as it relates to JWT. The main takeaway is, if properly configured by the site, cookies are more secure than alternatives like web storage. https://stormpath.com/blog/where-to-store-your-jwts-cookies-vs-html5-web-storage https://stormpath.com/blog/where-to-store-your-jwts-cookies-... But that's coming from a site admin point of view. As a user, it would be great to have a browser plugin that allows me to reject cookies that aren't secure/httponly.