Beefy Boxes and Bandwidth Generously Provided by pair Networks
go ahead... be a heretic

Re: •Re: Password hacker killer

by abell (Chaplain)
on Sep 08, 2003 at 07:45 UTC ( #289706=note: print w/replies, xml ) Need Help??

in reply to •Re: Password hacker killer
in thread Password hacker killer

Because HTTP is stateless, there's no definite way to know that two hits are coming from exactly the same person (or even the same browser).

As you seem to know quite well, there are standard ways to add session functionalities to http. The client can of course perform a clean request at each time, by cleaning cookies and filtering out session parameters, but the same is true of stateful protocols. It is equally difficult to stop an attacker from performing repeated ftp/ssh/telnet login attempts., so I'd say that the statelessness of http is not the issue here.



The stupider the astronaut, the easier it is to win the trip to Vega - A. Tucket

Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://289706]
and all is quiet...

How do I use this? | Other CB clients
Other Users?
Others scrutinizing the Monastery: (10)
As of 2018-03-22 20:29 GMT
Find Nodes?
    Voting Booth?
    When I think of a mole I think of:

    Results (286 votes). Check out past polls.