3 ms·
I would replace cookies with a browser controlled session id, 128 random bits encoded as hex.
by m_eiman 7y ago
I would replace cookies with a browser controlled session id, 128 random bits encoded as hex.
- yeaaaaah 7y agoSomething like HTTP state tokens? https://mikewest.github.io/http-state-tokens/draft-west-http-state-tokens.html https://mikewest.github.io/http-state-tokens/draft-west-http...
- m_eiman 7y agoYes, something like that! Except also remove support for old-style cookies, which from a quick scan that spec doesn't do.