Showing posts with label Securing Cookies. Show all posts
Showing posts with label Securing Cookies. Show all posts

Sunday, March 9, 2014

[infosecinstitute] Securing Cookies with HttpOnly and secure Flags

1. Introduction
Securing cookies is an important subject. Think about an authentication cookie. When the attacker is able to grab this cookie, he can impersonate the user. This article describes HttpOnly and secure flags that can enhance security of cookies.

Thursday, March 6, 2014

[infosecinstitute] Securing Cookies with HttpOnly and secure Flags

1. Introduction
Securing cookies is an important subject. Think about an authentication cookie. When the attacker is able to grab this cookie, he can impersonate the user. This article describes HttpOnly and secure flags that can enhance security of cookies.