7 ms·
In the post I meant server-side, in my comment I meant client-side. The general question - why not to bind the cookie to some other identifier of the user or u
by pankratiev 16y ago
In the post I meant server-side, in my comment I meant client-side.
The general question - why not to bind the cookie to some other identifier of the user or user's computer to make cookie useless in thief's hands.
- mooism2 16y agoIn general, the attacking computer can pretend to have the characteristics of the impersonated computer.