April 2007
Airtight sessions
I recently read an article which warns about the fact that cookie based authentication can be exploited using JavaScript. I am not going into detail about the problem itself, but I’ll try to give a brief explanation using an example:
Alice is a user browsing the web.…