News for hackers. Stuff that matters.

jadacyrus

jadacyrus on Hacker News

Re:Securing your API: a modern alternative to CSRF tokens on Tuesday June 13, 2017 @09:19PM (#14550080)
In addition to everything you've mentioned, the double submit cookie approach for csrf defense saves you from storing any state if you don't want to use a backend session.