News for hackers. Stuff that matters.

A comment on CSRF is really dead. Parent comment

Re:CSRF is really dead by all_blue_chucks on Saturday September 07, 2019 @11:02PM (#20908349)
Having to add state to fundamentally stateless operations is not a good thing.
[ Parent | on HN ]
Re:CSRF is really dead by NohatCoder on Sunday September 08, 2019 @12:00PM (#20911304)
Being logged in is not a stateless thing. Cookies are state.
[ Parent | on HN ]
Re:CSRF is really dead by all_blue_chucks on Sunday September 08, 2019 @04:31PM (#20913223)
It actually is stateless. The cookie is just one part of the stateless request.
[ Parent | on HN ]