3 ms·
The obvious trade-off is that now I can't see what's in the cookie.
by mnarayan01 14y ago
The obvious trade-off is that now I can't see what's in the cookie.
- garethadams 14y agoYou can quite happily set individual cookies[1] in a very similar way to sessions. You can also output or log the session object on any web page you want to. If certain data being user-visible is a feature rather than a side effect, the session was the wrong place for you to be putting it. [1]: http://api.rubyonrails.org/classes/ActionDispatch/Cookies.html http://api.rubyonrails.org/classes/ActionDispatch/Cookies.ht...
- mnarayan01 14y agoIn this case the "I" in question is the user for an arbitrary website. Obviously this is not a huge issue, but it's worth noting that this will make many sites a little harder to reverse-engineer. Of course many people might see this as a plus rather than a minus, so make of it what you will.