Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

This is a solved problem

Posted May 8, 2008 22:15 UTC (Thu) by pdewacht (subscriber, #47633)
In reply to: This is a solved problem by dskoll
Parent article: Cryptographic splicing makes for a Wordpress vulnerability

The benefit of this method is that you don't need to keep any server-side state for sessions:
all needed information can be kept in the cookie, and the hash ensures the information can't
be forges.

(Log in to post comments)