News for hackers. Stuff that matters.

A comment on CSRF is really dead. Parent comment

Re:CSRF is really dead by NohatCoder on Sunday September 08, 2019 @12:00PM (#20911304)
Being logged in is not a stateless thing. Cookies are state.
[ Parent | on HN ]
Re:CSRF is really dead by all_blue_chucks on Sunday September 08, 2019 @04:31PM (#20913223)
It actually is stateless. The cookie is just one part of the stateless request.
[ Parent | on HN ]