2 ms·

Is it useful to stuff the first 257 bytes of a HTTP response with a set-cookie with a 1-second expiry containing random nonsense?

• tptacek 13y ago
  No.
  • konklone 13y ago
    Why not? Sounds like a reasonable band-aid to me.
    • tptacek 13y ago
      Because there is a viable attack on the whole keystream, not just the first 256 bytes.