News for hackers. Stuff that matters.

A comment on Is it OK to hold credit card numbers in cookies, Santander?. Parent comment

Re:Is it OK to hold credit card numbers in cookies, Santander? by Firehed on Monday October 15, 2012 @07:24PM (#4657637)
"Never trust the client"
[ Parent | on HN ]
Re:Is it OK to hold credit card numbers in cookies, Santander? by nessus42 on Monday October 15, 2012 @08:28PM (#4657822)
The session information is cryptographically signed, so you don't have to trust it! These stateless server frameworks are just using the client as a state cache.
[ Parent | on HN ]