News for hackers. Stuff that matters.
Re:A practical proposal for migrating to safe long sessions ... by mountaineer22 on Thursday July 21, 2016 @12:25PM (#12137907)
Would there ever be a reason to have the cookie expire at all?

If the password is changed, you can invalidate the session, but the cookie remains?

There are no comments on this comment yet.