| |||||||||||||
Gathering session cookies with FiresheepGathering session cookies with FiresheepPosted Nov 4, 2010 20:48 UTC (Thu) by corbet (editor, #1)In reply to: Gathering session cookies with Firesheep by Spudd86 Parent article: Gathering session cookies with Firesheep I've implemented a simpler variant, have been using it for LWN editor accounts for a little bit now. The authentication cookie is SSL-only, of course, but we also set an insecure "SSL only" cookie. Whenever the site sees that second cookie on a non-SSL connection, the browser is redirected. Seems to work great.
(Log in to post comments)
|
|||||||||||||