3 ms·Cookie store has always been signed and in rails 4 it's encrypted.by epochwolf 13y agoCookie store has always been signed and in rails 4 it's encrypted.willvarfar 13y agoVery sloppy it wasn't encrypted from day 1 imo.rimantas 13y agoDay 1 was eight years ago. Care to tell which popular web frameworks did that then?mgkimsal 13y agomost popular web frameworks don't put data in the cookie, signed or not. yes it introduces different problems, but avoids this one.