Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

In Gmail, at the bottom of the screen if you click Details it will show you your recent account activity and there's a button to sign you out of all other sessions. How does this work? Are they somehow revoking cookies from the server side?

share|improve this question
    
Why the downvote? –  John Jun 19 '13 at 16:28

1 Answer 1

up vote 3 down vote accepted

This is a pretty simple task to accomplish.

Basically the server will store the session IDs of each individual active session in a database somewhere. Revoking a particular session is a simple task of removing the record from the database, which will invalidate the session.

share|improve this answer
    
Any idea how you'd accomplish this in ASP.NET? –  John Jun 19 '13 at 16:09
    
@John The solution he described would work in ASP. –  Simon Jun 19 '13 at 16:14
1  
@John I don't write ASP.NET code so I am unable to comment on a direct implementation. That said, it has nothing to do with which programming language/framework you use. –  Terry Chia Jun 19 '13 at 16:15
1  
Hmm I guess the ASP.NET implementation is probably a question better asked on Stack Overflow. –  John Jun 19 '13 at 16:28

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.