Re:Stealing passwords from McDonald's users
by PeterisP on Monday January 16, 2017 @03:19PM
(#13412668)
Signing the cookie with IP would break the site for everyone with changing IPs, e.g. mobile users on cellular networks. Web site sessions should persist across IPs.
[ Parent
| on HN ]
There are no comments on this comment yet.