2 ms·
Can they actually snarf cookies from other sites you're logged into, or would they only be able to get at your LinkedIn session cookies?
by kyllo 13y ago
Can they actually snarf cookies from other sites you're logged into, or would they only be able to get at your LinkedIn session cookies?
- bcl 13y agoNo. Cookies only get sent to the originating domain. What happened here is *.linkedin.com points to the rogue server so your cookies get passed to them instead of the real Linkedin.