News for hackers. Stuff that matters.

A comment on CSRF is really dead. Parent comment

Re:CSRF is really dead by olalonde on Saturday September 07, 2019 @11:31PM (#20908438)
This is what cookies are for. No one will be using CSRF tokens once cookies are fixed (e.g. SameSite is widely supported). "Just passing a state-key around" is not mutually exclusive with "being an ugly hack".
[ Parent | on HN ]

There are no comments on this comment yet.