3 ms·
The difference is that cookies are not even encrypted and you can get all of them by `sqlite3 .dump` on `cookies.sqlite` file, while password manager likely off
by megous 2y ago
The difference is that cookies are not even encrypted and you can get all of them by `sqlite3 .dump` on `cookies.sqlite` file, while password manager likely offers more protection, since that's the point of it. :D
Also SID are ephemeral and expire, while passwords are not supposed to be.
Session IDs may be tied by the backend to a client IP address, or some such, but likely that's not done very often, and may not be that useful.
- postalrat 2y agoIn this case the cookie would be as permanent as a password. I was just thinking if convenience is a priority why even have a password when the cookie is just as secure.