4 ms·

A browser cookie isn't a replacement for server-side sessions. You cannot store sensitive data (e.g. safety related information) in a browser cookie.

• gnaritas 13y ago
  As long as you encrypt it, sure you can. It's no different than storing the session pointer in the cookie.
  • ChrisAntaki 13y ago
    Though, with every HTTP request, the client will be uploading the entire cookie. This could manifest as degraded responsiveness, especially for mobile devices.
    • gnaritas 13y ago
      That's the trade you make when using cookies. Nothing new there.
  • ExpiredLink 13y ago
    Encrypted cookies? Just what hackers have been waiting for.