Beefy Boxes and Bandwidth Generously Provided by pair Networks
Welcome to the Monastery

Re: •Re: Password hacker killer

by abell (Chaplain)
on Sep 08, 2003 at 07:45 UTC ( #289706=note: print w/replies, xml ) Need Help??

in reply to •Re: Password hacker killer
in thread Password hacker killer

Because HTTP is stateless, there's no definite way to know that two hits are coming from exactly the same person (or even the same browser).

As you seem to know quite well, there are standard ways to add session functionalities to http. The client can of course perform a clean request at each time, by cleaning cookies and filtering out session parameters, but the same is true of stateful protocols. It is equally difficult to stop an attacker from performing repeated ftp/ssh/telnet login attempts., so I'd say that the statelessness of http is not the issue here.



The stupider the astronaut, the easier it is to win the trip to Vega - A. Tucket

Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://289706]
and all is quiet...

How do I use this? | Other CB clients
Other Users?
Others taking refuge in the Monastery: (4)
As of 2018-07-20 01:20 GMT
Find Nodes?
    Voting Booth?
    It has been suggested to rename Perl 6 in order to boost its marketing potential. Which name would you prefer?

    Results (422 votes). Check out past polls.