News for hackers. Stuff that matters.

A comment on GitHub moves to SSL, but remains Firesheepable. Parent comment

Re:GitHub moves to SSL, but remains Firesheepable by rtomayko on Wednesday November 03, 2010 @12:58PM (#1865447)
Okay. The session cookie is marked secure and is sent only in response to HTTPS requests. That should cover everything.
[ Parent | on HN ]
Re:GitHub moves to SSL, but remains Firesheepable by percept on Wednesday November 03, 2010 @01:02PM (#1865473)
Somebody get this guy some karma.
[ Parent | on HN ]