3 ms·

Browsers? You mean web servers, surely? Servers don't know the client's mac address.

• pankratiev 16y ago
  In the post I meant server-side, in my comment I meant client-side. The general question - why not to bind the cookie to some other identifier of the user or user's computer to make cookie useless in thief's hands.
  • mooism2 16y ago
    In general, the attacking computer can pretend to have the characteristics of the impersonated computer.