Have written up a full response here, every claim by the researcher is covered https://getsession.org/blog/a-response-to-recent-claims-about-sessions-security-a

Have written up a full response here, every claim by the researcher is covered https://getsession.org/blog/a-response-to-recent-claims-about-sessions-security-architecture https://getsession.org/blog/a-response-to-recent-claims-abou...