News for hackers. Stuff that matters.

A comment on Ask HN: What should I use for authentication (WebID, OpenID, Password)?. Parent comment

Re:Ask HN: What should I use for authentication (WebID, Open... by stephenr on Thursday April 20, 2017 @06:37AM (#14155501)
I would consider a browser that allows a cookie with a secure flag to be overwritten from a http page buggy, and thus the solution would be simply enforcing the secure flag in a same way.

What legitimate use is there for overwriting a secure cookie with a non secure one?

[ Parent | on HN ]

There are no comments on this comment yet.