News for hackers. Stuff that matters.

A comment on Living Without Sessions. Parent comment

Re:Living Without Sessions by DougBTX on Monday October 06, 2008 @04:40PM (#325277)
In theory by using a cookie which can be verified by any server, but which can only be generated with the user's password (which is never stored in clear text).

There is an article here, http://www.lightbluetouchpaper.org/2008/05/16/hardened-state... but the PDF link seems dead.

[ Parent | on HN ]

There are no comments on this comment yet.