3 ms·
What is the difference between a secure password synced with a password manager and a cookie that doesn't expire synced with a browser or extension? I don't see
by postalrat 2y ago
What is the difference between a secure password synced with a password manager and a cookie that doesn't expire synced with a browser or extension? I don't see much difference so why bother even having a password?
- megous 2y agoThe difference is that cookies are not even encrypted and you can get all of them by `sqlite3 .dump` on `cookies.sqlite` file, while password manager likely offers more protection, since that's the point of it. :D Also SID are ephemeral and expire, while passwords are not supposed to be. Session IDs may be tied by the backend to a client IP address, or some such, but likely that's not done very often, and may not be that useful.
- postalrat 2y agoIn this case the cookie would be as permanent as a password. I was just thinking if convenience is a priority why even have a password when the cookie is just as secure.
- 9dev 2y agoWhat if your cookie is compromised and you want to ensure the attacker cannot log into your account anymore?
- postalrat 2y agoUse your cookie to create a new cookie. Same as a password.