News for hackers. Stuff that matters.

A comment on Living Without Sessions. Parent comment

Re:Living Without Sessions by newt0311 on Monday October 06, 2008 @05:52PM (#325353)
No kidding. Preventing forgery would be a nightmare.
[ Parent | on HN ]
Re:Living Without Sessions by jgrahamc on Tuesday October 07, 2008 @06:07AM (#325593)
No it isn't. You just sign the data that's on the client and check the signature when it is returned. See http://news.ycombinator.com/item?id=325551.
[ Parent | on HN ]