4 ms·
> For a website, there's no major reason you shouldn't have a reasonably long-lasting cookie to prevent any need for regular login. What happens if the cookie
by JeanMarcS 9y ago
> For a website, there's no major reason you shouldn't have a reasonably long-lasting cookie to prevent any need for regular login.
What happens if the cookie is stolen (real question) ? Wasn't that the problem in keeping connection / session information in cookies back in the days ?
- BillinghamJ 9y agoThere are lots of effective mechanisms to prevent the stealing of cookies. If you have a client-side-only site, probably best to use local storage instead. Otherwise, marking them as HTTP-only and secure-only should be sufficient.
- JeanMarcS 9y agoThank you.