3 ms·

Out of curiosity, what would you have recommended, had you been on the web steering committee at the time?

• phkahler 11y ago
  >> Out of curiosity, what would you have recommended, had you been on the web steering committee at the time? Cookies should have been at most a GUID for a single session on a single server. With a little dynamic content you can put a session GUID in every link on a site and not have anything stored locally on the users machine. Back in the day this was a more significant problem than it would be today. Note that this would also preserve the user ID in bookmarks. Also, it really begs for HTTPS. There are probably other ways to do these things, but people will either claim they are inefficient or just keep their blinders on and make excuses in favor of the status quo. Of course many of the alternatives could probably be abused as well, it's just harder.
  • fixermark 11y ago
    That might very well have legs. I wonder how one would support keeping a user logged in across sessions, but that might still be a solvable problem.