Beefy Boxes and Bandwidth Generously Provided by pair Networks
good chemistry is complicated,
and a little bit messy -LW

Re: Re: Re: Re: Re: The sound of one cookie (not) authenticating

by sutch (Curate)
on Apr 03, 2001 at 17:55 UTC ( #69303=note: print w/replies, xml ) Need Help??

in reply to Re: Re: Re: Re: The sound of one cookie (not) authenticating
in thread The sound of one cookie (not) authenticating

I still don't see how this prohibits sessions from being used by another browser. Maybe there is something obvious that I am missing. arhuman, can you please clarify this for me?

What information is used in the hash?

If the information in the hash is not directly tied to the browser (such as IP address, browser name), I don't see how a server can determine if the "incorrect" browser is requesting the session.

If only the session key and some private value is used in the hash, how does the server determine if the hashed value came from the browser that it was originally sent to or some other browser?

  • Comment on Re: Re: Re: Re: Re: The sound of one cookie (not) authenticating

Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://69303]
[Discipulus]: the latest version works in 5.24 and not in 5.14. previous one worked on both but crashed on both with merry rabbit
[Discipulus]: yes: replaced by its name
Discipulus why Win32 must exists?!?!
[choroba]: If you want rabbits and poo, install cygwin
[Discipulus]: no thanks! strawberry flavour is better than poo's one

How do I use this? | Other CB clients
Other Users?
Others making s'mores by the fire in the courtyard of the Monastery: (10)
As of 2017-09-19 11:46 GMT
Find Nodes?
    Voting Booth?
    During the recent solar eclipse, I:

    Results (219 votes). Check out past polls.