4 ms·
Signing is slow, if anything signing the CSRF tokens just became your bottleneck, if not you just inflated the request size by kilobytes for no good reason.
by 13 11y ago
Signing is slow, if anything signing the CSRF tokens just became your bottleneck, if not you just inflated the request size by kilobytes for no good reason.
- zkhalique 11y agoSigning doesn't require I/O and can be massively parallelized. And also the CSRF token doesn't need signing, it comes from the session data stored on the server. The session id is what needs signing.