3 ms·
I read that post before, maybe I missed, but where he says about DoS possibilities of cookie tossing?
by homakov 13y ago
I read that post before, maybe I missed, but where he says about DoS possibilities of cookie tossing?
- tptacek 13y agoSearch for "Does this matter from a security perspective". Also: take a crack at the CTF we set up. I think (a) you'll do well at it and (b) it'll be fun to watch you. http://microcorruption.com http://microcorruption.com.
- homakov 13y agoYes, now I see. Weird it stayed not fixed, Public suffix list is not implemented in Chrome. Anyway, the list is not even close to real solution (just had long discussion with @titanius on twitter why not). So many quirks and use cases of <sub>.domain. > it'll be fun to watch you uh. hmm, ok.