3 ms·
There is lots on the DNS already. For the security argument: Consider you run on `example.com` and at a later stage add `[blog|forum|support|...].example.com` s
by johannes1234321 7y ago
There is lots on the DNS already. For the security argument: Consider you run on `example.com` and at a later stage add `[blog|forum|support|...].example.com` suddenly cookies from `example.com` might leak to those Subdomains. If you put cookies on `www.example.com` they won't leak to those.
- Avamander 7y agoNot if you set the Domain attribute of the cookie properly, this is a poor software problem, not second-level domain problem.
- johannes1234321 7y agoTrue, but simple mitigations can be powerful ... Sidenote: If leaking cookies to your own subdomains is a risk, one might also have other problems already. Point is: I explained the potential risk. Evaluating one has to do oneself