News for hackers. Stuff that matters.

A comment on RainLoop Webmail: Simple, modern and fast web-based email client. Parent comment

Re:RainLoop Webmail: Simple, modern and fast web-based email... by pjc50 on Wednesday June 25, 2014 @06:14AM (#7943065)
Terrible security record of PHP apps, probably.
[ Parent | on HN ]
Re:RainLoop Webmail: Simple, modern and fast web-based email... by brokenparser on Wednesday June 25, 2014 @06:58AM (#7943213)
Doesn't make sense because Squirrelmail is also written in PHP and it's pretty solid. The next version will use HTTP-only cookies to further harden against attacks.
[ Parent | on HN ]
Re:RainLoop Webmail: Simple, modern and fast web-based email... by mgkimsal on Wednesday June 25, 2014 @08:50AM (#7943556)
do you know of any particular reason that wasn't put in to place years ago? concern for legacy browsers at all costs? it sounds snarky, but it's a genuine question - I think I've set my apps to be http-only cookies for a while now, and am wondering why someone would only get around to it in 2014.
[ Parent | on HN ]