2 ms·
Does signing the cookie with secondary information such IP or UA help? I know they can both be spoofed, but it's an extra layer...
by richthegeek 10y ago
Does signing the cookie with secondary information such IP or UA help? I know they can both be spoofed, but it's an extra layer...
- PeterisP 10y agoSigning the cookie with IP would break the site for everyone with changing IPs, e.g. mobile users on cellular networks. Web site sessions should persist across IPs.