Re:Firesheep: Easy HTTP session hijacking from within Firefox
by cdine on Monday October 25, 2010 @12:45AM
(#1828593)
Yup, they're one of our examples of a "good" setup. However, Google leaks iGoogle and some other things (Latitude, address book, reader, ...)
[ Parent
| on HN ]
Re:Firesheep: Easy HTTP session hijacking from within Firefox
by itsnotvalid on Monday October 25, 2010 @05:30AM
(#1829131)
However they don't share the same session cookie for different service as far as I know (which they negotiate that through TLS protected link)
Likewise they have also made several other services TLS only (e.g. calendar, docs)